x86: Restrict MSR access when securelevel is set
authorMatthew Garrett <mjg59@srcf.ucam.org>
Fri, 8 Feb 2013 19:12:13 +0000 (11:12 -0800)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 13 Nov 2016 04:38:09 +0000 (04:38 +0000)
commit1ce441ff0b71a39cd1baf71d8da1b614bd01ebfa
treea2c9dcc34ec521b77a09d125cda0c4256ac53310
parent3a23b3b4be6e5316fb854be8a4f78f727f6842c1
x86: Restrict MSR access when securelevel is set

Permitting write access to MSRs allows userspace to modify the running
kernel. Prevent this if securelevel has been set. Based on a patch by Kees
Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
Gbp-Pq: Topic features/all/securelevel
Gbp-Pq: Name x86-restrict-msr-access-when-securelevel-is-set.patch
arch/x86/kernel/msr.c