Re: [PATCH V31 11/25] x86: Lock down IO port access when the kernel is locked down

From: Andy Lutomirski
Date: Tue Mar 26 2019 - 16:57:05 EST


On Tue, Mar 26, 2019 at 11:28 AM Matthew Garrett
<matthewgarrett@xxxxxxxxxx> wrote:
>
> From: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
>
> IO port access would permit users to gain access to PCI configuration
> registers, which in turn (on a lot of hardware) give access to MMIO
> register space. This would potentially permit root to trigger arbitrary
> DMA, so lock it down by default.
>
> This also implicitly locks down the KDADDIO, KDDELIO, KDENABIO and
> KDDISABIO console ioctls.
>

Reviewed-by: Andy Lutomirski <luto@xxxxxxxxxx>