+ast@xxxxxxxxxx On Wed, Apr 4, 2018 at 6:17 PM, David Howells <dhowells@xxxxxxxxxx> wrote: > Andy Lutomirski <luto@xxxxxxxxxx> wrote: [...] >> 3. All the bpf and tracing stuf, etc, gets changed so it only takes >> effect when LOCKDOWN_PROTECT_INTEGRITY_AND_SECRECY is set. > > Uh, no. bpf, for example, can be used to modify kernel memory. I'm pretty sure bpf isn't supposed to be able to modify arbitrary kernel memory. AFAIU if you can use BPF to write to arbitrary kernel memory, that's a bug; with CAP_SYS_ADMIN, you can read from userspace, write to userspace, and read from kernelspace, but you shouldn't be able to write to kernelspace. -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
