On Thu, 2014-03-13 at 21:24 +0000, One Thousand Gnomes wrote: > If I have CAP_SYS_RAWIO I can make arbitary ring 0 calls from userspace, > trivially and in a fashion well known and documented. How? > You've missed a few others too - mem= (especially with exactmap) for > example. /dev/mem access is restricted, so what would this buy you? The potential to have the kernel hand over a region belonging to hardware in response to a userspace allocation? -- Matthew Garrett {.n++%ݶw{.n+{G{ayʇڙ,jfhz_(階ݢj"mG?&~iOzv^m ?I