Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: Can you please change the subsys in $subject to 'x86/msr:' ? > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode. Based on a > patch by Kees

Re: [PATCH 14/24] x86: Restrict MSR access when the kernel is locked down

2017-04-05 Thread Kees Cook
On Wed, Apr 5, 2017 at 10:12 AM, David Howells wrote: > From: Matthew Garrett > > Writing to MSRs should not be allowed if the kernel is locked down, since > it could lead to execution of arbitrary code in kernel mode. Based on a > patch by Kees Cook. > > Cc: Kees Cook > Signed-off-by: Matthew