lkml.org 
[lkml]   [2018]   [Jan]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [kernel-hardening] Re: [PATCH] cpu: do not leak vulnerabilities to unprivileged users
    On Thu, Jan 25, 2018 at 2:34 PM, Alan Cox <gnomes@lxorguk.ukuu.org.uk> wrote:
    > As you observe any attacker can already trivially ascertain whether
    > protection is on, so there is no point pretending file permissions
    > magically stop that. In fact the information is already in cpuinfo.

    Actually the other place it leaks is in dmesg, which would need to be
    patched too.

    My understanding about cpuinfo was that it showed whether or not the
    processor family is generally vulnerable to it, independent of whether
    or not the kernel has been patched. What this patch does relates to
    whether or not the kernel has been patched.

    \
     
     \ /
      Last update: 2018-01-25 14:40    [W:3.355 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site