Re: [PATCH V3 10/11] x86: Restrict MSR access when module loadingis restricted

From: James Morris
Date: Tue Sep 03 2013 - 20:47:51 EST


On Tue, 3 Sep 2013, Matthew Garrett wrote:

> Writing to MSRs should not be allowed if module loading is restricted,
> since it could lead to execution of arbitrary code in kernel mode. Based
> on a patch by Kees Cook.
>
> Cc: Kees Cook <keescook@xxxxxxxxxxxx>
> Signed-off-by: Matthew Garrett <matthew.garrett@xxxxxxxxxx>


Reviewed-by: James Morris <jmorris@xxxxxxxxx>



--
James Morris
<jmorris@xxxxxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/