Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: Can you please change the subsys in $subject to 'x86/msr:' ? > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode.

Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: Can you please change the subsys in $subject to 'x86/msr:' ? > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode. Based on a > patch by Kees

[PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook. Signed-off-by: Matthew Garrett Signed-off-by:

[PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook. Signed-off-by: Matthew Garrett Signed-off-by: David Howells Acked-by: Kees Cook cc: x...@kernel.org ---

Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread Kees Cook
On Wed, Apr 5, 2017 at 10:12 AM, David Howells wrote: > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode. Based on a > patch by Kees

Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread Kees Cook
On Wed, Apr 5, 2017 at 10:12 AM, David Howells wrote: > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode. Based on a > patch by Kees Cook. > > Cc: Kees Cook > Signed-off-by: Matthew

[PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook. Cc: Kees Cook Signed-off-by: Matthew Garrett

[PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook. Cc: Kees Cook Signed-off-by: Matthew Garrett Signed-off-by: David Howells --- arch/x86/kernel/msr.c |