[PATCH 04/27] Restrict /dev/mem and /dev/kmem when the kernel is locked down

[James Morris]

On Thu, 19 Oct 2017, David Howells wrote:

> From: Matthew Garrett <matthew.garrett at nebula.com>
> 
> Allowing users to write to address space makes it possible for the kernel to
> be subverted, avoiding module loading restrictions.  Prevent this when the
> kernel has been locked down.
> 
> Signed-off-by: Matthew Garrett <matthew.garrett at nebula.com>
> Signed-off-by: David Howells <dhowells at redhat.com>


Reviewed-by: James Morris <james.l.morris at oracle.com>

-- 
James Morris
<james.l.morris at oracle.com>

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html