]> git.hungrycats.org Git - linux/commit
/proc/iomem: only expose physical resource addresses to privileged users
authorLinus Torvalds <torvalds@linux-foundation.org>
Thu, 14 Apr 2016 19:05:37 +0000 (12:05 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 7 Aug 2017 02:19:42 +0000 (19:19 -0700)
commite8aff60373182f48f5191b147894e954a591a521
treeb2058ac03dc5e8326129d82cd8508f22f328ea98
parent14ae9c4b5ae235bdaa74bb1c40de9a42ca691566
/proc/iomem: only expose physical resource addresses to privileged users

commit 51d7b120418e99d6b3bf8df9eb3cc31e8171dee4 upstream.

In commit c4004b02f8e5b ("x86: remove the kernel code/data/bss resources
from /proc/iomem") I was hoping to remove the phyiscal kernel address
data from /proc/iomem entirely, but that had to be reverted because some
system programs actually use it.

This limits all the detailed resource information to properly
credentialed users instead.

[sumits: this is used in Ubuntu as a fix for CVE-2015-8944]

Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sumit Semwal <sumit.semwal@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/resource.c