Comment 3 for bug 1840454

Revision history for this message
Kai-Heng Feng (kaihengfeng) wrote :

No I think it's because kernel lockdown:
commit 708822cdbcd3faab40e83a79b71617e1812a1b06
Author: Matthew Garrett <email address hidden>
Date: Mon Feb 18 12:44:59 2019 +0000

    UBUNTU: SAUCE: (efi-lockdown) x86/msr: Restrict MSR access when the kernel is locked down

    Writing to MSRs should not be allowed if the kernel is locked down, since
    it could lead to execution of arbitrary code in kernel mode. Based on a
    patch by Kees Cook.

    MSR accesses are logged for the purposes of building up a whitelist as per
    Alan Cox's suggestion.

    Signed-off-by: Matthew Garrett <email address hidden>
    Signed-off-by: David Howells <email address hidden>
    Acked-by: Kees Cook <email address hidden>
    Reviewed-by: Thomas Gleixner <email address hidden>
    cc: <email address hidden>
    Signed-off-by: Matthew Garrett <email address hidden>
    (cherry picked from commit 323bd1cb92e03558ae3f3a11dd683dcbb23eeaea
     git://git.kernel.org/pub/scm/linux/kernel/git/jwboyer/fedora.git)
    Signed-off-by: Seth Forshee <email address hidden>