2017-10-20 16:45:37

by joeyli

[permalink] [raw]
Subject: Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down

On Fri, Oct 20, 2017 at 05:03:22PM +0100, David Howells wrote:
> [email protected] wrote:
>
> > I think that we don't need to lock down sys_bpf() now because
> > we didn't lock down other interfaces for reading arbitrary
> > address like /dev/mem and /dev/kmem.
>
> Ummm... See patch 4. You even gave me a Reviewed-by for it ;-)
>
> David

hm... patch 4 only prevents write_mem() but not read_mem().
Or I missed anything?

Thanks
Joey Lee

From 1581795195541961912@xxx Fri Oct 20 16:37:31 +0000 2017
X-GM-THRID: 1581706293786105139
X-Gmail-Labels: Inbox,Category Forums