Date: Mon, 16 Jun 2008 14:42:41 -0400 From: Coleman Kane <cokane@FreeBSD.org> To: Stanislav Sedov <stas@FreeBSD.org> Cc: kib@freebsd.org, Poul-Henning Kamp <phk@phk.freebsd.dk>, Rui Paulo <rpaulo@FreeBSD.org>, current@freebsd.org, Peter Jeremy <peterjeremy@optushome.com.au> Subject: Re: cpuctl(formely devcpu) patch test request Message-ID: <1213641761.2184.0.camel@localhost> In-Reply-To: <20080616222740.5cdd9490.stas@FreeBSD.org> References: <20080606020927.8d6675e1.stas@FreeBSD.org> <10261.1212703949@critter.freebsd.dk> <20080606025533.8322ee08.stas@FreeBSD.org> <1212758604.1904.33.camel@localhost> <20080615230250.7f3efae4.stas@FreeBSD.org> <1213557999.1816.15.camel@localhost> <20080616204433.48ad9879.stas@FreeBSD.org> <e1309ba60806161110x5f774fcdic2f5c7b2e7bcb83e@mail.gmail.com> <20080616222740.5cdd9490.stas@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-sqFBwwcZozgkReHFvg+z Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Mon, 2008-06-16 at 22:27 +0400, Stanislav Sedov wrote: > On Mon, 16 Jun 2008 19:10:17 +0100 > "Rui Paulo" <rpaulo@FreeBSD.org> mentioned: >=20 > > There's no security issue here. > > If the system administrator is concerned about "security" of cpuctl, > > he/she just has to compile-out cpuctl or remove the module from the > > file system. > >=20 >=20 > Well, in this case it would be possible to load that again. Setting > a non-zero securelevel or implementing a specific MAC policy might > be a more correct solution. cpuctl(4) won't allow any MSR operations > if securelevel is above zero. >=20 Is it potentially "unsafe" to use RDMSR? --=20 Coleman Kane --=-sqFBwwcZozgkReHFvg+z Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (FreeBSD) iEYEABECAAYFAkhWtBsACgkQcMSxQcXat5cYQACfRfihcd7RhACdADN6wbHxjue4 xxgAnRCMqQ/zqrwqtgxQ3ssxTYo3FEiW =U8Un -----END PGP SIGNATURE----- --=-sqFBwwcZozgkReHFvg+z--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1213641761.2184.0.camel>