Re: [PATCH v2 2/2] powerpc/rtas: block error injection when locked down

2022-09-28 Thread Nathan Lynch
Andrew Donnellan writes: > On Mon, 2022-09-26 at 08:16 -0500, Nathan Lynch wrote: >> The error injection facility on pseries VMs allows corruption of >> arbitrary guest memory, potentially enabling a sufficiently >> privileged >> user to disable lockdown or perform other modifications of the >> r

Re: [PATCH v2 2/2] powerpc/rtas: block error injection when locked down

2022-09-28 Thread Andrew Donnellan
On Mon, 2022-09-26 at 08:16 -0500, Nathan Lynch wrote: > The error injection facility on pseries VMs allows corruption of > arbitrary guest memory, potentially enabling a sufficiently > privileged > user to disable lockdown or perform other modifications of the > running > kernel via the rtas sysca

Re: [PATCH v2 2/2] powerpc/rtas: block error injection when locked down

2022-09-26 Thread Paul Moore
On Mon, Sep 26, 2022 at 9:18 AM Nathan Lynch wrote: > > The error injection facility on pseries VMs allows corruption of > arbitrary guest memory, potentially enabling a sufficiently privileged > user to disable lockdown or perform other modifications of the running > kernel via the rtas syscall.

[PATCH v2 2/2] powerpc/rtas: block error injection when locked down

2022-09-26 Thread Nathan Lynch
The error injection facility on pseries VMs allows corruption of arbitrary guest memory, potentially enabling a sufficiently privileged user to disable lockdown or perform other modifications of the running kernel via the rtas syscall. Block the PAPR error injection facility from being opened or c