drm/amd: Tighten permissions on VBIOS flashing attributes

superm1 · alexdeucher · commit 7ab1a4913d00 · 2023-06-13T17:04:51.000-04:00
Non-root users shouldn't be able to try to trigger a VBIOS flash or query the flashing status. This should be reserved for users with the appropriate permissions. Cc: stable@vger.kernel.org Fixes: 8424f2c ("drm/amdgpu/psp: Add vbflash sysfs interface support") Reviewed-by: Alex Deucher <alexander.deucher@amd.com> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c
@@ -3602,13 +3602,13 @@ static ssize_t amdgpu_psp_vbflash_status(struct device *dev,
 }
 
 static const struct bin_attribute psp_vbflash_bin_attr = {
-	.attr = {.name = "psp_vbflash", .mode = 0664},
+	.attr = {.name = "psp_vbflash", .mode = 0660},
 	.size = 0,
 	.write = amdgpu_psp_vbflash_write,
 	.read = amdgpu_psp_vbflash_read,
 };
 
-static DEVICE_ATTR(psp_vbflash_status, 0444, amdgpu_psp_vbflash_status, NULL);
+static DEVICE_ATTR(psp_vbflash_status, 0440, amdgpu_psp_vbflash_status, NULL);
 
 int amdgpu_psp_sysfs_init(struct amdgpu_device *adev)
 {

Original file line number	Diff line number	Diff line change
`@@ -3602,13 +3602,13 @@ static ssize_t amdgpu_psp_vbflash_status(struct device *dev,`
`3602`	`3602`	`}`
`3603`	`3603`
`3604`	`3604`	`static const struct bin_attribute psp_vbflash_bin_attr = {`
`3605`		`- .attr = {.name = "psp_vbflash", .mode = 0664},`
	`3605`	`+ .attr = {.name = "psp_vbflash", .mode = 0660},`
`3606`	`3606`	`.size = 0,`
`3607`	`3607`	`.write = amdgpu_psp_vbflash_write,`
`3608`	`3608`	`.read = amdgpu_psp_vbflash_read,`
`3609`	`3609`	`};`
`3610`	`3610`
`3611`		`-static DEVICE_ATTR(psp_vbflash_status, 0444, amdgpu_psp_vbflash_status, NULL);`
	`3611`	`+static DEVICE_ATTR(psp_vbflash_status, 0440, amdgpu_psp_vbflash_status, NULL);`
`3612`	`3612`
`3613`	`3613`	`int amdgpu_psp_sysfs_init(struct amdgpu_device *adev)`
`3614`	`3614`	`{`