Suppress sysfs bind and unbind attributes on trusted_key_driver so that userspace cannot unbind the driver and unregister key_type_trusted while the trusted module remains loaded. Signed-off-by: Jarkko Sakkinen --- security/keys/trusted-keys/trusted_tee.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/security/keys/trusted-keys/trusted_tee.c b/security/keys/trusted-keys/trusted_tee.c index ad9c7baddcef..87ea549f7f0b 100644 --- a/security/keys/trusted-keys/trusted_tee.c +++ b/security/keys/trusted-keys/trusted_tee.c @@ -307,7 +307,8 @@ static struct tee_client_driver trusted_key_driver = { .remove = trusted_key_remove, .id_table = trusted_key_id_table, .driver = { - .name = DRIVER_NAME, + .name = DRIVER_NAME, + .suppress_bind_attrs = true, }, }; -- 2.47.3