Re: [PATCH] x86: Lock down MSR writing in secure boot

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "H. Peter Anvin" <hpa@xxxxxxxxx>
Subject: Re: [PATCH] x86: Lock down MSR writing in secure boot
From: Matthew Garrett <matthew.garrett@xxxxxxxxxx>
Date: Sat, 9 Feb 2013 01:29:44 +0000
Accept-language: en-US
Cc: Borislav Petkov <bp@xxxxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, Ingo Molnar <mingo@xxxxxxxxxx>, "x86@xxxxxxxxxx" <x86@xxxxxxxxxx>, "linux-efi@xxxxxxxxxxxxxxx" <linux-efi@xxxxxxxxxxxxxxx>, linux-security-module <linux-security-module@xxxxxxxxxxxxxxx>
In-reply-to: <5115A4CC.3080102@zytor.com>
Thread-index: AQHOBjA7mQsIMlqU/k+EElzc7Yz1iZhwVXgAgAAAbACAAAawAIAACLcAgAABPICAAAKrAIAAAdKAgAAHwICAABjCAIAAChOAgAAFkwCAACBDAIAAAhCA
Thread-topic: [PATCH] x86: Lock down MSR writing in secure boot

On Fri, 2013-02-08 at 17:22 -0800, H. Peter Anvin wrote:

> You don't have to build the kernel twice to exclude a loadable module.

I guess you could just strip the signatures off any modules you don't
want to support under Secure Boot, but that breaks some other use cases.

��.n��������+%������w��{.n�����{����*jg��������ݢj����G�������j:+v���w�m������w�������h�����٥

Follow-Ups:
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook

References:
- [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: H. Peter Anvin
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: H. Peter Anvin
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: H. Peter Anvin
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Matthew Garrett
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Kees Cook
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: H. Peter Anvin
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Borislav Petkov
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: Matthew Garrett
- Re: [PATCH] x86: Lock down MSR writing in secure boot
  - From: H. Peter Anvin

Prev by Date: Re: [PATCH] x86: Lock down MSR writing in secure boot
Next by Date: Re: [PATCH] x86: Lock down MSR writing in secure boot
Previous by thread: Re: [PATCH] x86: Lock down MSR writing in secure boot
Next by thread: Re: [PATCH] x86: Lock down MSR writing in secure boot
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Security] [Bugtraq] [Linux OMAP] [Linux MIPS] [ECOS] [Asterisk Internet PBX] [Linux API]