Re: [PATCH V3 10/11] x86: Restrict MSR access when module loading is restricted

2013-09-03 Thread James Morris
On Tue, 3 Sep 2013, Matthew Garrett wrote: > Writing to MSRs should not be allowed if module loading is restricted, > since it could lead to execution of arbitrary code in kernel mode. Based > on a patch by Kees Cook. > > Cc: Kees Cook > Signed-off-by: Matthew Garrett Reviewed-by: James Morri

[PATCH V3 10/11] x86: Restrict MSR access when module loading is restricted

2013-09-03 Thread Matthew Garrett
Writing to MSRs should not be allowed if module loading is restricted, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook. Cc: Kees Cook Signed-off-by: Matthew Garrett --- arch/x86/kernel/msr.c | 7 +++ 1 file changed, 7 insertions(+) diff --gi