Messages in this thread | | | Date | Thu, 4 Sep 2014 07:07:39 +0200 | From | Ingo Molnar <> | Subject | Re: RFC: Tainting the kernel on raw I/O access |
| |
* H. Peter Anvin <h.peter.anvin@intel.com> wrote:
> In a meeting earlier today, we discussed MSR access and that it could be > used to do bad things. The same applies to other forms of raw I/O > (/dev/mem, /dev/port, ioperm, iopl, etc.) > > This is basically the same problem with which the secure boot people > have been struggling. > > Peter Z. suggested we should taint the kernel on raw I/O access, and I > tend to concur.
Lets start with the 'only for developers and the crazy' interfaces, like /dev/msr access, and extend it step by step?
Thanks,
Ingo
| |