]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
projects / mirror_ubuntu-zesty-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4aaaeb2) | patch
UBUNTU: SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
authorMatthew Garrett <matthew.garrett@nebula.com>
Fri, 8 Feb 2013 19:12:13 +0000 (11:12 -0800)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
commit34c83a0588d42cafb943f91083b8cbb4195664cb
treed46776bdc0159c69fe3ac76017b0cb416185467dtree
parent4aaaeb2e73bf887e76bb1d62c50557a117bed10ecommit | diff
UBUNTU: SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted

Writing to MSRs should not be allowed if module loading is restricted,
since it could lead to execution of arbitrary code in kernel mode. Based
on a patch by Kees Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
arch/x86/kernel/msr.c diff | blob | blame | history
ubuntu-zesty-kernel mirror