Home » Mailing list archives » linux-kernel » 2008 » October » 1

RE: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prevent malicious write/erase

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Jiri Kosina <jkosina@...>
To: Allan, Bruce W <bruce.w.allan@...>
Cc: Brandeburg, Jesse <jesse.brandeburg@...>, linux-kernel@vger.kernel.org <linux-kernel@...>, linux-netdev@vger.kernel.org <linux-netdev@...>, kkeil@suse.de <kkeil@...>, agospoda@redhat.com <agospoda@...>, arjan@linux.intel.com <arjan@...>, Graham, David <david.graham@...>, Ronciak, John <john.ronciak@...>, Thomas Gleixner <tglx@...>, chris.jones@canonical.com <chris.jones@...>, tim.gardner@intel.com <tim.gardner@...>, airlied@gmail.com <airlied@...>, Olaf Kirch <okir@...>
Subject: RE: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prevent malicious write/erase
Date: Wednesday, October 1, 2008 - 9:29 am

On Tue, 30 Sep 2008, Allan, Bruce W wrote:


> Yeah, we can do that.  I need to amend the patch a bit to prevent the


Olaf raised a rather interesting question -- would iAMT be able to access

NVM contents directly, even if the lock bit would be set on the device?

I.e. is iAMT allowed direct access to the EEPROM contents, bypassing

shadow ram mappings?


Thanks,


--

Jiri Kosina

SUSE Labs


--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[RFC PATCH 00/12] e1000e debug and protection patches, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
[RFC PATCH 12/12] update version, Jesse Brandeburg, (Mon Sep 29, 11:20 pm)
[RFC PATCH 11/12] e1000e: write protect ICHx NVM to prevent ..., Jesse Brandeburg, (Mon Sep 29, 11:20 pm)
Re: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prev..., Jiri Kosina, (Tue Sep 30, 8:40 am)
RE: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prev..., Allan, Bruce W, (Tue Sep 30, 11:47 am)
RE: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prev..., Jiri Kosina, (Wed Oct 1, 9:29 am)
RE: [RFC PATCH 11/12] e1000e: write protect ICHx NVM to prev..., Allan, Bruce W, (Wed Oct 1, 3:13 pm)
[RFC PATCH 09/12] e1000e: dump eeprom to dmesg for ich8/9, Jesse Brandeburg, (Mon Sep 29, 11:20 pm)
[RFC PATCH 08/12] e1000e: allow bad checksum, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
Re: [RFC PATCH 08/12] e1000e: allow bad checksum, Jiri Kosina, (Tue Sep 30, 4:38 am)
[RFC PATCH 10/12] e1000e: Use set_memory_ro()/set_memory_rw(..., Jesse Brandeburg, (Mon Sep 29, 11:20 pm)
[RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Jiri Kosina, (Thu Oct 2, 10:28 am)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Olaf Kirch, (Thu Oct 2, 11:03 am)
[PATCH] e1000e: prevent concurrent access to NVRAM, Thomas Gleixner, (Thu Oct 2, 7:42 pm)
Re: [PATCH] e1000e: prevent concurrent access to NVRAM, Jesse Brandeburg, (Thu Oct 2, 8:19 pm)
Re: [PATCH] e1000e: prevent concurrent access to NVRAM, Thomas Gleixner, (Thu Oct 2, 8:28 pm)
RE: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Brandeburg, Jesse, (Thu Oct 2, 12:27 pm)
RE: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Thomas Gleixner, (Thu Oct 2, 2:02 pm)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Olaf Kirch, (Thu Oct 2, 1:33 pm)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Thomas Gleixner, (Thu Oct 2, 2:58 pm)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Olaf Kirch, (Thu Oct 2, 3:07 pm)
Re: [RFC PATCH 07/12] e1000e: debug contention on NVM SWFLAG, Olaf Kirch, (Thu Oct 2, 3:08 pm)
[RFC PATCH 06/12] e1000e: drop stats lock, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
[RFC PATCH 05/12] e1000e: fix lockdep issues, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
[RFC PATCH 04/12] e1000e: do not ever sleep in interrupt con..., Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
[RFC PATCH 03/12] e1000e: reset swflag after resetting hardw..., Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
[RFC PATCH 01/12] x86: export set_memory_ro and set_memory_rw, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
Re: [RFC PATCH 01/12] x86: export set_memory_ro and set_memo..., Ingo Molnar, (Tue Sep 30, 3:07 am)
[RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Brandeburg, (Mon Sep 29, 11:19 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Barnes, (Thu Oct 2, 6:23 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, David Miller, (Tue Oct 7, 7:19 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, David Miller, (Fri Oct 3, 4:46 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Barnes, (Fri Oct 3, 5:29 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jiri Kosina, (Fri Oct 3, 5:45 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Brandeburg, (Fri Oct 3, 7:28 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jiri Kosina, (Sat Oct 4, 6:21 am)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Thomas Gleixner, (Sat Oct 4, 7:02 am)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Brandeburg, (Sat Oct 4, 9:24 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Thomas Gleixner, (Sun Oct 5, 4:51 am)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Arjan van de Ven, (Sun Oct 5, 11:05 am)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Thomas Gleixner, (Sun Oct 5, 11:55 am)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Arjan van de Ven, (Sun Oct 5, 12:02 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Thomas Gleixner, (Sun Oct 5, 12:16 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Arjan van de Ven, (Sun Oct 5, 1:01 pm)
Re: [RFC PATCH 02/12] On Tue, 23 Sep 2008, David Miller wrote:, Jesse Brandeburg, (Fri Oct 3, 7:30 pm)