On Thu, 2014-03-13 at 21:24 +0000, One Thousand Gnomes wrote: > If I have CAP_SYS_RAWIO I can make arbitary ring 0 calls from userspace, > trivially and in a fashion well known and documented.
How? > You've missed a few others too - mem= (especially with exactmap) for > example. /dev/mem access is restricted, so what would this buy you? The potential to have the kernel hand over a region belonging to hardware in response to a userspace allocation? -- Matthew Garrett <matthew.garr...@nebula.com> N�����r��y����b�X��ǧv�^�){.n�+����{����zX����ܨ}���Ơz�&j:+v�������zZ+��+zf���h���~����i���z��w���?�����&�)ߢf��^jǫy�m��@A�a��� 0��h���i