Re: [PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down

From: James Morris
Date: Fri Oct 20 2017 - 19:22:14 EST

Next message: James Morris: "Re: [PATCH 05/27] kexec: Disable at runtime if the kernel is locked down"
Previous message: James Morris: "Re: [PATCH 03/27] Enforce module signatures if the kernel is locked down"
In reply to: joeyli: "Re: [PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down"
Next in thread: David Howells: "[PATCH 05/27] kexec: Disable at runtime if the kernel is locked down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 19 Oct 2017, David Howells wrote:

> From: Matthew Garrett <matthew.garrett@xxxxxxxxxx>
>
> Allowing users to write to address space makes it possible for the kernel to
> be subverted, avoiding module loading restrictions. Prevent this when the
> kernel has been locked down.
>
> Signed-off-by: Matthew Garrett <matthew.garrett@xxxxxxxxxx>
> Signed-off-by: David Howells <dhowells@xxxxxxxxxx>

Reviewed-by: James Morris <james.l.morris@xxxxxxxxxx>

--
James Morris
<james.l.morris@xxxxxxxxxx>

Next message: James Morris: "Re: [PATCH 05/27] kexec: Disable at runtime if the kernel is locked down"
Previous message: James Morris: "Re: [PATCH 03/27] Enforce module signatures if the kernel is locked down"
In reply to: joeyli: "Re: [PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down"
Next in thread: David Howells: "[PATCH 05/27] kexec: Disable at runtime if the kernel is locked down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]