| Date | Sat, 21 Oct 2017 03:21:54 +0400 (+04) | From | James Morris <> | Subject | Re: [PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down |
| |
On Thu, 19 Oct 2017, David Howells wrote:
> From: Matthew Garrett <matthew.garrett@nebula.com> > > Allowing users to write to address space makes it possible for the kernel to > be subverted, avoiding module loading restrictions. Prevent this when the > kernel has been locked down. > > Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com> > Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
-- James Morris <james.l.morris@oracle.com>
|