Messages in this thread | | | Date | Sat, 21 Oct 2017 00:43:43 +0800 | From | jlee@suse ... | Subject | Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down |
| |
On Fri, Oct 20, 2017 at 05:03:22PM +0100, David Howells wrote: > jlee@suse.com wrote: > > > I think that we don't need to lock down sys_bpf() now because > > we didn't lock down other interfaces for reading arbitrary > > address like /dev/mem and /dev/kmem. > > Ummm... See patch 4. You even gave me a Reviewed-by for it ;-) > > David
hm... patch 4 only prevents write_mem() but not read_mem(). Or I missed anything?
Thanks Joey Lee
| |