Messages in this thread | | | From | Matthew Garrett <> | Subject | Re: Trusted kernel patchset for Secure Boot lockdown | Date | Thu, 13 Mar 2014 21:30:48 +0000 |
| |
On Thu, 2014-03-13 at 21:24 +0000, One Thousand Gnomes wrote:
> If I have CAP_SYS_RAWIO I can make arbitary ring 0 calls from userspace, > trivially and in a fashion well known and documented.
How?
> You've missed a few others too - mem= (especially with exactmap) for > example.
/dev/mem access is restricted, so what would this buy you? The potential to have the kernel hand over a region belonging to hardware in response to a userspace allocation?
-- Matthew Garrett <matthew.garrett@nebula.com>
| |