Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: joeyli <jlee@xxxxxxxx>
Subject: Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
From: David Howells <dhowells@xxxxxxxxxx>
Date: Fri, 20 Oct 2017 09:08:48 +0100
Cc: dhowells@xxxxxxxxxx, Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>, linux-security-module@xxxxxxxxxxxxxxx, gnomes@xxxxxxxxxxxxxxxxxxx, linux-efi@xxxxxxxxxxxxxxx, matthew.garrett@xxxxxxxxxx, gregkh@xxxxxxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, jforbes@xxxxxxxxxx, Daniel Borkmann <daniel@xxxxxxxxxxxxx>, "David S. Miller" <davem@xxxxxxxxxxxxx>, netdev@xxxxxxxxxxxxxxx, Gary Lin <GLin@xxxxxxxx>
Dmarc-filter: OpenDMARC Filter v1.3.2 mx1.redhat.com 64B2D83F3F
In-reply-to: <20171020024732.GJ3285@linux-l9pv.suse>
Organization: Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903

Hi Joey,

Should I just lock down sys_bpf() entirely for now?  We can always free it up
somewhat later.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-efi" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Follow-Ups:
- Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
  - From: David Howells
- Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
  - From: jlee

References:
- Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
  - From: joeyli
- [PATCH 00/27] security, efi: Add kernel lockdown
  - From: David Howells
- [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
  - From: David Howells
- Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
  - From: Alexei Starovoitov

Prev by Date: Re: [PATCH 17/27] acpi: Disable APEI error injection if the kernel is locked down
Next by Date: [Part1 PATCH v7 07/17] x86/efi: Access EFI data as encrypted when SEV is active
Previous by thread: Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
Next by thread: Re: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Security] [Bugtraq] [Linux OMAP] [Linux MIPS] [ECOS] [Asterisk Internet PBX] [Linux API]