| Subject | Re: [PATCH 0/4] x86/module: Out-of-tree module decode and sanitize | From | Andrew Cooper <> | Date | Tue, 7 Apr 2020 18:23:27 +0100 |
| |
On 07/04/2020 12:02, Peter Zijlstra wrote: > Hi all, > > Driven by the SLD vs VMX interaction, here are some patches that provide means > to analyze the text of out-of-tree modules. > > The first user of that is refusing to load modules on VMX-SLD conflicts, but it > also has a second patch that refulses to load any module that tries to modify > CRn/DRn. > > I'm thinking people will quickly come up with more and more elaborate tests to > which to subject out-of-tree modules.
Anything playing with LGDT & friends? Shouldn't be substantially more elaborate than CR/DR to check for.
~Andrew
|