x86/msr: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook.

Matthew Garrett committed 7 years ago

Commit 95f5e951 parent 96c4f673 files · +10 −0Browse files

Showing the changes to include/linux (1 of 3 files). Show all

Unified · Split

include/linux/security.h+1−0

@@ -109,6 +109,7 @@ enum lockdown_reason { · 108 unmodified lines
109	LOCKDOWN_HIBERNATION,	109	LOCKDOWN_HIBERNATION,
110	LOCKDOWN_PCI_ACCESS,	110	LOCKDOWN_PCI_ACCESS,
111	LOCKDOWN_IOPORT,	111	LOCKDOWN_IOPORT,
		112	LOCKDOWN_MSR,
112	LOCKDOWN_INTEGRITY_MAX,	113	LOCKDOWN_INTEGRITY_MAX,
113	LOCKDOWN_CONFIDENTIALITY_MAX,	114	LOCKDOWN_CONFIDENTIALITY_MAX,
114	};	115	};

x86/msr: Restrict MSR access when the kernel is locked down

Keyboard shortcuts

General

Issues and pull requests

Issues, pull requests and Inbox

Repository code