projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b09b974) | patch
x86: Restrict MSR access when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 30 Oct 2017 15:32:11 +0000 (15:32 +0000)
commitc5ddb0179a29f94005f9cb231348e28bedd1aa88
tree4aa86a9618587fffcd3228ba7b47edcedf9f95c2tree | snapshot
parentb09b9743ba995eb79c9c8114b55bdf474d57fb5ccommit | diff
x86: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since
it could lead to execution of arbitrary code in kernel mode.  Based on a
patch by Kees Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0051-x86-Restrict-MSR-access-when-the-kernel-is-locked-do.patch
arch/x86/kernel/msr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.