Re: [PATCH V3 05/11] asus-wmi: Restrict debugfs interface when module loading is restricted

2013-09-03 Thread James Morris
On Tue, 3 Sep 2013, Matthew Garrett wrote: > We have no way of validating what all of the Asus WMI methods do on a > given machine, and there's a risk that some will allow hardware state to > be manipulated in such a way that arbitrary code can be executed in the > kernel, circumventing module loa

[PATCH V3 05/11] asus-wmi: Restrict debugfs interface when module loading is restricted

2013-09-03 Thread Matthew Garrett
We have no way of validating what all of the Asus WMI methods do on a given machine, and there's a risk that some will allow hardware state to be manipulated in such a way that arbitrary code can be executed in the kernel, circumventing module loading restrictions. Prevent that if any of these feat