Re: [PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: > From: Matthew Garrett > > IO port access would permit users to gain access to PCI configuration > registers, which in turn (on a lot of hardware) give access to MMIO > register space. This would potentially permit root to

Re: [PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: > From: Matthew Garrett > > IO port access would permit users to gain access to PCI configuration > registers, which in turn (on a lot of hardware) give access to MMIO > register space. This would potentially permit root to trigger arbitrary > DMA, so

[PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett IO port access would permit users to gain access to PCI configuration registers, which in turn (on a lot of hardware) give access to MMIO register space. This would potentially permit root to trigger arbitrary DMA, so lock it down by default.

[PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett IO port access would permit users to gain access to PCI configuration registers, which in turn (on a lot of hardware) give access to MMIO register space. This would potentially permit root to trigger arbitrary DMA, so lock it down by default. This also implicitly locks

[PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett IO port access would permit users to gain access to PCI configuration registers, which in turn (on a lot of hardware) give access to MMIO register space. This would potentially permit root to trigger arbitrary DMA, so lock it down by default.

[PATCH 13/24] x86: Lock down IO port access when the kernel is locked down

2017-04-05 Thread David Howells
From: Matthew Garrett IO port access would permit users to gain access to PCI configuration registers, which in turn (on a lot of hardware) give access to MMIO register space. This would potentially permit root to trigger arbitrary DMA, so lock it down by default. This also implicitly locks