Messages in this thread | | | From | Matthew Garrett <> | Date | Thu, 18 Apr 2019 12:35:36 -0700 | Subject | Re: [PATCH V32 01/27] Add the ability to lock down access to the running kernel image |
| |
On Tue, Apr 16, 2019 at 1:40 AM Andrew Donnellan <andrew.donnellan@au1.ibm.com> wrote: > I'm thinking about whether we should lock down the powerpc xmon debug > monitor - intuitively, I think the answer is yes if for no other reason > than Least Astonishment, when lockdown is enabled you probably don't > expect xmon to keep letting you access kernel memory.
The original patchset contained a sysrq hotkey to allow physically present users to disable lockdown, so I'm not super concerned about this case - I could definitely be convinced otherwise, though.
| |