On Tue, Mar 26, 2019 at 11:28 AM Matthew Garrett <matthewgarrett@xxxxxxxxxx> wrote: > > From: Matthew Garrett <mjg59@xxxxxxxxxxxxx> > > IO port access would permit users to gain access to PCI configuration > registers, which in turn (on a lot of hardware) give access to MMIO > register space. This would potentially permit root to trigger arbitrary > DMA, so lock it down by default. > > This also implicitly locks down the KDADDIO, KDDELIO, KDENABIO and > KDDISABIO console ioctls. > Reviewed-by: Andy Lutomirski <luto@xxxxxxxxxx>