Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1199160

[PATCH 0/2] x86: allow to enable/disable modify_ldt at run time

Show all headers | View raw

This is the second version. It adds a strategy for the sysctls so that we
can reject any change to a value that was already negative. This way it's
possible to disable modify_ldt temporarily or permanently (eg: lock down a
server) as suggested by Kees.

Willy Tarreau (2):
  sysctl: add a new generic strategy to make permanent changes on
    negative values
  x86/ldt: allow to disable modify_ldt at runtime

 Documentation/sysctl/kernel.txt | 16 +++++++++++++
 arch/x86/Kconfig                | 17 ++++++++++++++
 arch/x86/kernel/ldt.c           | 15 +++++++++++++
 kernel/sysctl.c                 | 50 +++++++++++++++++++++++++++++++++++++++++
 4 files changed, 98 insertions(+)

-- 
1.7.12.1

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[PATCH 0/2] x86: allow to enable/disable modify_ldt at run time Willy Tarreau <w@1wt.eu> - 2015-08-03 20:30 +0200
  [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Willy Tarreau <w@1wt.eu> - 2015-08-03 20:30 +0200
    Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Andy Lutomirski <luto@amacapital.net> - 2015-08-03 20:50 +0200
      Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Andy Lutomirski <luto@amacapital.net> - 2015-08-03 21:10 +0200
        Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Willy Tarreau <w@1wt.eu> - 2015-08-03 21:20 +0200
      Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Willy Tarreau <w@1wt.eu> - 2015-08-03 21:10 +0200
      Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Borislav Petkov <bp@alien8.de> - 2015-08-04 06:00 +0200
        Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Willy Tarreau <w@1wt.eu> - 2015-08-04 08:10 +0200
    Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Kees Cook <keescook@chromium.org> - 2015-08-04 00:40 +0200
      Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Willy Tarreau <w@1wt.eu> - 2015-08-04 01:30 +0200
        Re: [PATCH 2/2] x86/ldt: allow to disable modify_ldt at runtime Kees Cook <keescook@chromium.org> - 2015-08-04 03:40 +0200
  [PATCH v3 1/1] x86: allow to enable/disable modify_ldt at run time Willy Tarreau <w@1wt.eu> - 2015-08-04 11:00 +0200

csiph-web