projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eab9ee2) | patch
x86: Restrict MSR access when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Fri, 22 Dec 2017 14:12:23 +0000 (14:12 +0000)
commit03c55400aae20d81390264ef0d1878e50cbf25c7
tree25514f218dfc289d61e7704d4025782634bfb0fatree | snapshot
parenteab9ee2e00234178efbc3fc3d35c0ffa7abc3ec7commit | diff
x86: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since
it could lead to execution of arbitrary code in kernel mode.  Based on a
patch by Kees Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0051-x86-Restrict-MSR-access-when-the-kernel-is-locked-do.patch
arch/x86/kernel/msr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.