Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752250AbcLFKvE (ORCPT ); Tue, 6 Dec 2016 05:51:04 -0500 Received: from mail.linuxfoundation.org ([140.211.169.12]:42818 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751488AbcLFKu4 (ORCPT ); Tue, 6 Dec 2016 05:50:56 -0500 Date: Tue, 6 Dec 2016 11:50:08 +0100 From: Greg KH To: David Howells Cc: One Thousand Gnomes , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, minyard@acm.org Subject: Re: [PATCH 01/39] Annotate module params that specify hardware parameters (eg. ioport) Message-ID: <20161206105008.GA9900@kroah.com> References: <20161206071104.GA10292@kroah.com> <20161201150135.GA10317@kroah.com> <148059537897.31612.9461043954611464597.stgit@warthog.procyon.org.uk> <148059538747.31612.8974972913601108271.stgit@warthog.procyon.org.uk> <18118.1480608146@warthog.procyon.org.uk> <20161205211227.4cc792d6@lxorguk.ukuu.org.uk> <32097.1481020967@warthog.procyon.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <32097.1481020967@warthog.procyon.org.uk> User-Agent: Mutt/1.7.2 (2016-11-26) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1175 Lines: 29 On Tue, Dec 06, 2016 at 10:42:47AM +0000, David Howells wrote: > Greg KH wrote: > > > What about all of the ways you can change ioports dynamically from > > ioctls? Or can't python write ioctls to device nodes? :) > > Do you mean change the ioport a driver uses by ioctl or actually read/write an > ioport directly? change the ioport a driver uses. The tty layer can do this for UARTs through an ioctl (can't remember which one off the top of my head, sorry, it gets reported as a bug by the syscall fuzzers every other year or so when they crash the kernel randomly...) > Do the following patches that I've already posted address your issues: > > http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/commit/?h=efi-lock-down&id=c67c338dd82d28c67d38eb3147368eb36dbf1c16 > > http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/commit/?h=efi-lock-down&id=10bd7277eef5194ba038fc2d907bac9e6aeab12b > > They're going to be in a patchset that I am/was intending to sit atop the > module parameter-lockdown patchset. Ah, I hadn't seen those, that's a good start, and does close some other places. thanks, greg k-h