projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e19bdcf) | patch
x86: Restrict MSR access when securelevel is set
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 8 Feb 2013 19:12:13 +0000 (11:12 -0800)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 12 Jun 2017 15:24:30 +0000 (15:24 +0000)
commitafa3b8d4a59a20c7f1a2da3ab7576ba2a9c2a3a9
treeb630b616a6477b8ca98d5f4fe8c61f498ec4bda0tree | snapshot
parente19bdcf8c4de0923913de8de8048f6b78c7a5a26commit | diff
x86: Restrict MSR access when securelevel is set

Permitting write access to MSRs allows userspace to modify the running
kernel. Prevent this if securelevel has been set. Based on a patch by Kees
Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name x86-restrict-msr-access-when-securelevel-is-set.patch
arch/x86/kernel/msr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.