This message generated a parse failure. Raw output follows here. Please use 'back' to navigate. From devnull@lkml.org Thu Apr 25 22:36:33 2024 Envelope-to: j@jasper.es Delivery-date: Wed, 13 Feb 2013 19:02:26 +0100 Received: from localhost ([127.0.0.1] helo=squeeze.vs19.net) by squeeze.vs19.net with esmtp (Exim 4.72) (envelope-from ) id 1U5gf4-0003z5-71 for j@jasper.es; Wed, 13 Feb 2013 19:02:26 +0100 Received: from pop3.telfort.nl [213.205.33.252] by squeeze.vs19.net with POP3 (fetchmail-6.3.18) for (single-drop); Wed, 13 Feb 2013 19:02:26 +0100 (CET) Received: from cmgw-nl-2 (10.39.115.162) by mda-nl-1.mail.tiscali.sys (8.5.142) id 4FC4EF720673D5EA for jasper@telfort.nl; Wed, 13 Feb 2013 18:51:06 +0100 Received: from cpsmtpb-ews08.kpnxchange.com ([213.75.39.13]) by cmgw-nl-2 with id ztr61k0010H1flR01tr6lp; Wed, 13 Feb 2013 18:51:06 +0100 X-CNFS-Analysis: v=2.0 cv=OLKlLFmB c=1 sm=2 a=UK1r566ZdBxH71SXbqIOeA==:17 a=jl2ymW9NZSsA:10 a=qOGdr0nlrwwA:10 a=Be7GNdAy9LsA:10 a=Fqyr-xB8ttkA:10 a=IkcTkHD0fZMA:10 a=vpqfxihKAAAA:8 a=YpvmO1qcrD4A:10 a=VwQbUJbxAAAA:8 a=W0vUJOdyAAAA:8 a=CSdiLf913uaMcuxZim8A:9 a=QEXdDO2ut3Y Received: from cpsps-ews20.kpnxchange.com ([10.94.84.186]) by cpsmtpb-ews08.kpnxchange.com with Microsoft SMTPSVC(7.5.7601.17514); Wed, 13 Feb 2013 18:49:47 +0100 Received: from vger.kernel.org ([209.132.180.67]) by cpsps-ews20.kpnxchange.com with Microsoft SMTPSVC(7.5.7601.17514); Wed, 13 Feb 2013 18:49:47 +0100 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760441Ab3BMRuz convert rfc822-to-quoted-printable (ORCPT ); Wed, 13 Feb 2013 12:50:55 -0500 Received: from nm25.access.bullet.mail.sp2.yahoo.com ([98.139.44.152]:45878 "EHLO nm25.access.bullet.mail.sp2.yahoo.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1760179Ab3BMRuy (ORCPT ); Wed, 13 Feb 2013 12:5 Received: from [98.139.44.103] by nm25.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Feb 2013 17:50:53 -0000 Received: from [98.138.207.14] by tm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Feb 2013 17:50:53 -0000 Received: from [127.0.0.1] by smtp107.biz.mail.ne1.yahoo.com with NNFMP; 13 Feb 2013 17:50:53 -0000 X-Yahoo-Newman-Id: 618144.32703.bm@smtp107.biz.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: ZJ11omkVM1nWo8TqLAvJcW6_xwq8rl5hgR.W6FP2EAcyLoH REjrJW_Sxx9oHY0Of.F1OsBVAGXPX0UnY3ZhZ0A7RPWwUutZw7P8vsyF1d76 R6DuTC1H1deIG9UROi94YTh5n2S0U3cSIdIMrbpYzlLcEtq1NxISVly4js.p kTqNHTKsRRiAlqIGeiBOvw7d8asXN1NjOIK7qqofzz84zuAHXQxAMVulU.vQ bTCJ2699prUcZxNEyyqBNK6 X-Yahoo-SMTP: OIJXglSswBDfgLtXluJ6wiAYv6_cnw-- Received: from [192.168.0.103] (casey@50.131.111.212 with plain) by smtp107.biz.mail.ne1.yahoo.com with SMTP; 13 Feb 2013 09:50:53 -0800 PST Message-Id: <511BD291.1040003@schaufler-ca.com> Date: Wed, 13 Feb 2013 09:51:13 -0800 From: Casey Schaufler User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 Mime-Version: 1.0 To: Matthew Garrett Cc: "H. Peter Anvin" , Borislav Petkov , Kees Cook , LKML , Thomas Gleixner , Ingo Molnar , "x86@kernel.org" , "linux-efi@ Subject: Re: [PATCH] x86: Lock down MSR writing in secure boot References: <1360355671.18083.18.camel@x230.lan> <5 In-Reply-To: <1360776399.18083.39.camel@x230.lan> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-Id: X-Mailing-List: linux-kernel@vger.kernel.org X-OriginalArrivalTime: 13 Feb 2013 17:49:47.0331 (UTC) FILETIME=[8390B130:01CE0A12] X-RcptDomain: telfort.nl On 2/13/2013 9:26 AM, Matthew Garrett wrote: > On Wed, 2013-02-13 at 09:20 -0800, H. Peter Anvin wrote: > >> Problem: >> >> Someone adds SYS_CAP_RAWIO to some places it definitely does not >> belong. >> >> Solution: >> >> Break all the *appropriate* (as defined)uses of SYS_CAP_RAWIO? > Problem: > > CAP_SYS_RAWIO has been used in a bunch of arguably inappropriate plac= es. > Removing CAP_SYS_RAWIO from the set of possible capabilities on a sys= tem > will prevent userspace from doing things that userspace should be > permitted to do. Removing CAP_SYS_RAWIO from the places that it > currently exists will allow userspace to do too much. Replacing > CAP_SYS_RAWIO with CAP_SYS_ADMIN will prevent userspace from doing > things that it can currently do. > > Solution: > > Admit that CAP_SYS_RAWIO is fucked up beyond rescue. Add a new > capability with well-defined semantics. You can't add a new capability where there is an existing capability that can be remotely argued to be appropriate. If you tried to "fix" CAP_SYS_RAWIO and/or CAP_SYS_ADMIN you'd end up with hundreds of capabilities. Your particular problem is *not* so important that you get a capability all to yourself. > N=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BDr=EF=BF=BD=EF=BF=BDy=EF= =BF=BD=EF=BF=BD=EF=BF=BDb=EF=BF=BDX=EF=BF=BD=EF=BF=BD=C7=A7v=EF=BF=BD^=EF= =BF=BD)=DE=BA{.n=EF=BF=BD+=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD{=EF=BF=BD= =EF=BF=BD=EF=BF=BD.=EF=BF=BD+r=EF=BF=BD=EF=BF=BDn=EF=BF=BD=E8=A7=B6=17=EF= =BF=BD=EF=BF=BD=DC=A8}=EF=BF=BD=EF=BF=BD=EF=BF=BD=C6=A0z=EF=BF=BD&j:+v=EF= =BF=BD=EF=BF=BD=EF=BF=BD=07=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BDzZ+=EF=BF= =BD=EF=BF=BD+zf=EF=BF=BD=EF=BF=BD=EF=BF=BDh=EF=BF=BD=EF=BF=BD=EF=BF=BD~= =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BDi=EF=BF=BD=EF=BF=BD=EF=BF=BDz=EF=BF= =BD=1E=EF=BF=BDw=EF=BF=BD=EF=BF=BD=EF=BF=BD?=EF=BF=BD=EF=BF=BD=EF=BF=BD= =EF=BF=BD&=EF=BF=BD)=DF=A2=1Bfl=3D=3D=3D -- To unsubscribe from this list: send the line "unsubscribe linux-kernel"= in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/