Thread (146 messages) 146 messages, 15 authors, 2017-12-07

[PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down

From: James Morris <hidden>
Date: 2017-10-20 23:22:09
Also in: linux-efi, lkml

On Thu, 19 Oct 2017, David Howells wrote:
From: Matthew Garrett <redacted>

Allowing users to write to address space makes it possible for the kernel to
be subverted, avoiding module loading restrictions.  Prevent this when the
kernel has been locked down.

Signed-off-by: Matthew Garrett <redacted>
Signed-off-by: David Howells <dhowells@redhat.com>

Reviewed-by: James Morris <redacted>

-- 
James Morris
[off-list ref]

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help