Suppress sysfs bind and unbind attributes on trusted_key_driver so that userspace cannot unbind the driver and unregister key_type_trusted while the trusted module remains loaded. Signed-off-by: Jarkko Sakkinen --- security/keys/trusted-keys/trusted_tee.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/security/keys/trusted-keys/trusted_tee.c b/security/keys/trusted-keys/trusted_tee.c index 6e465c8bef5e..227efb668aa9 100644 --- a/security/keys/trusted-keys/trusted_tee.c +++ b/security/keys/trusted-keys/trusted_tee.c @@ -263,7 +263,8 @@ static struct tee_client_driver trusted_key_driver = { .remove = trusted_key_remove, .id_table = trusted_key_id_table, .driver = { - .name = DRIVER_NAME, + .name = DRIVER_NAME, + .suppress_bind_attrs = true, }, }; -- 2.47.3