Received: by 2002:a25:4158:0:0:0:0:0 with SMTP id o85csp948352yba; Thu, 4 Apr 2019 00:51:16 -0700 (PDT) X-Google-Smtp-Source: APXvYqzD6ZppAM0P9YCOs6eBNnrF9/29I+Z5xCID62zGznKZ47TVhY3eMBM384uH2wLvPlNVuLSu X-Received: by 2002:a17:902:264:: with SMTP id 91mr4891636plc.184.1554364276878; Thu, 04 Apr 2019 00:51:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1554364276; cv=none; d=google.com; s=arc-20160816; b=nhUDYkB7UkGI4+KL6+FfX+x2o38vvuGK8N29SCgylI71CJUa4EcX3rpps7WbtDPT7t dZgJg0xYITO1Kwlo7pXOfi72JFOIL1Od3U33IyJ/UoeyWSYq/0wKVXHP99xzcfhh5Nqv 9g+nSBvE/tbfDNv0opEAh2znVNDyg3WxjaCG9/N3RUn7mai2r/2I2bqD8MvVFPXLqKzn Z8EVukMy8/LM8VIMlwaHYurVTBllr+6x3UM171Fy+xFOwymav6Kg284Ns1RZfVIcj+/a BLpwNZ5xDY1c2DUdzkiXtRCTSKhbDnTxj/EMgGqtnQuPxTxtnQ/JE4D43xVfAxN/Zu+3 +hUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date; bh=eMgFVAq81Lmza1jszVBcWTQHTcWb9X5Oplar6Tu2GNg=; b=DUJASW76GYS9swAGUjTXOS1VFctApXqCD2a8Gz7zya33ZMuOK5fytBnzlkBvFScJsc NuaVjToNHQhcHAzLakc6rU/AoHw8rNh/JcU1O40r/V5QHEKFdM31qC7x/AgvpUIk1/UA f5JAsTW6hN0J4J3zUONKUrQn4qAmsvPPGjqw0G5ho1aOX2vkatBT0CP8hoI5FFnPiae6 4wRysn3IXfZp/uLJ8+VN1enPizaCm0Y2cbTGDzdtPGbu4IFpfpBgnm6m6ccsdxMogTCf AQizz5+qkMPKK4DK2i0rlIqK15jVIK2+C4apEdXAqyWPciqnOyfZpcCR/GhrgwJ3m4gD 0vqg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id v24si15538278pgi.286.2019.04.04.00.51.01; Thu, 04 Apr 2019 00:51:16 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727165AbfDDHtH (ORCPT + 99 others); Thu, 4 Apr 2019 03:49:07 -0400 Received: from Galois.linutronix.de ([146.0.238.70]:43766 "EHLO Galois.linutronix.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725904AbfDDHtG (ORCPT ); Thu, 4 Apr 2019 03:49:06 -0400 Received: from p5492e2fc.dip0.t-ipconnect.de ([84.146.226.252] helo=nanos) by Galois.linutronix.de with esmtpsa (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1hBx7P-0000P7-3J; Thu, 04 Apr 2019 09:49:03 +0200 Date: Thu, 4 Apr 2019 09:49:02 +0200 (CEST) From: Thomas Gleixner To: Matthew Garrett cc: jmorris@namei.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, dhowells@redhat.com, linux-api@vger.kernel.org, luto@kernel.org, Matthew Garrett , Matthew Garrett , x86@kernel.org Subject: Re: [PATCH V32 11/27] x86: Lock down IO port access when the kernel is locked down In-Reply-To: <20190404003249.14356-12-matthewgarrett@google.com> Message-ID: References: <20190404003249.14356-1-matthewgarrett@google.com> <20190404003249.14356-12-matthewgarrett@google.com> User-Agent: Alpine 2.21 (DEB 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-Linutronix-Spam-Score: -1.0 X-Linutronix-Spam-Level: - X-Linutronix-Spam-Status: No , -1.0 points, 5.0 required, ALL_TRUSTED=-1,SHORTCIRCUIT=-0.0001 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 3 Apr 2019, Matthew Garrett wrote: > From: Matthew Garrett > > IO port access would permit users to gain access to PCI configuration > registers, which in turn (on a lot of hardware) give access to MMIO > register space. This would potentially permit root to trigger arbitrary > DMA, so lock it down by default. > > This also implicitly locks down the KDADDIO, KDDELIO, KDENABIO and > KDDISABIO console ioctls. > > Signed-off-by: Matthew Garrett > Signed-off-by: David Howells Reviewed-by: Thomas Gleixner