lkml.org 
[lkml]   [2022]   [Jan]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH V40 12/29] x86: Lock down IO port access when the kernel is locked down
On Wed, Jan 05, 2022 at 02:25:41PM +0800, Kai-Heng Feng wrote:

> This patch breaks ioperm() usage from userspace programs with CAP_SYS_RAWIO cap.
>
> I wonder if it's possible to revert this commit?

When lockdown is enabled, or under all circumstances? It's expected to
be blocked when lockdown is enabled - allowing userland to use port IO
would potentially allow reconfiguration of PCI devices in ways that
could alter kernel behaviour in ways relevant to security, which is what
lockdown aims to prevent. What's being broken by this?

\
 
 \ /
  Last update: 2022-01-05 07:56    [W:0.109 / U:1.100 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site