Re: [PATCH V40 11/29] PCI: Lock down BAR access when the kernel is locked down

2019-08-20 Thread Matthew Garrett
On Tue, Aug 20, 2019 at 12:45 PM Bjorn Helgaas wrote: > Since I've acked this and it's 11/29, I've been assuming you intend > to merge the whole series together. But the fact that it's up to V40 > makes me wonder if you're waiting for me to merge this one. Just let > me know either way. James

Re: [PATCH V40 11/29] PCI: Lock down BAR access when the kernel is locked down

2019-08-20 Thread Bjorn Helgaas
On Mon, Aug 19, 2019 at 05:17:47PM -0700, Matthew Garrett wrote: > From: Matthew Garrett > > Any hardware that can potentially generate DMA has to be locked down in > order to avoid it being possible for an attacker to modify kernel code, > allowing them to circumvent disabled module loading or

[PATCH V40 11/29] PCI: Lock down BAR access when the kernel is locked down

2019-08-19 Thread Matthew Garrett
From: Matthew Garrett Any hardware that can potentially generate DMA has to be locked down in order to avoid it being possible for an attacker to modify kernel code, allowing them to circumvent disabled module loading or module signing. Default to paranoid - in future we can potentially relax