| Date | Wed, 4 Sep 2013 10:49:13 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH V3 10/11] x86: Restrict MSR access when module loading is restricted |
| |
On Tue, 3 Sep 2013, Matthew Garrett wrote:
> Writing to MSRs should not be allowed if module loading is restricted, > since it could lead to execution of arbitrary code in kernel mode. Based > on a patch by Kees Cook. > > Cc: Kees Cook <keescook@chromium.org> > Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Reviewed-by: James Morris <jmorris@namei.org>
-- James Morris <jmorris@namei.org>
|