Messages in this thread |  | | Date | Fri, 08 Feb 2013 11:42:50 -0800 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH] x86: Lock down MSR writing in secure boot |
| |
On 02/08/2013 11:18 AM, Kees Cook wrote: > No. CAP_RAWIO is for reading. Writing needs a much stronger check. > > -Kees
If so, I suspect we need to do this for *all* raw I/O... but I keep wondering how much more sensitive writing really is than reading.
-hpa
-- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf.
|  |