projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: daea96a) | patch
x86: Restrict MSR access when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 16 Nov 2017 21:04:10 +0000 (21:04 +0000)
commit5894cb013f92c984a8e4534f4470c906cfa5b5ae
tree3dbba76069bde5537a530a58af6336adfc5d3c2ctree | snapshot
parentdaea96ad068c8e874995cfca0dd75b33762c75e9commit | diff
x86: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since
it could lead to execution of arbitrary code in kernel mode.  Based on a
patch by Kees Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0051-x86-Restrict-MSR-access-when-the-kernel-is-locked-do.patch
arch/x86/kernel/msr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.