go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
gvisor/pkg/sentry/platform
History
Liu Hua 7581e84cb6 tss: block userspace access to all I/O ports. 
A userspace process (CPL=3) can access an i/o port if the bit corresponding to
the port is set to 0 in the I/O permission bitmap.

Configure the I/O permission bitmap address beyond the last valid byte in the
TSS so access to all i/o ports is blocked.

Signed-off-by: Liu Hua <sdu.liu@huawei.com>
Change-Id: I3df76980c3735491db768f7210e71703f86bb989
PiperOrigin-RevId: 257336518
 		2019-07-09 22:21:56 -07:00
..
interrupt Update canonical repository. 2019-06-13 16:50:15 -07:00
kvm Avoid importing platforms from many source files 2019-07-03 22:51:26 -07:00
ptrace Avoid importing platforms from many source files 2019-07-03 22:51:26 -07:00
ring0 tss: block userspace access to all I/O ports. 2019-07-09 22:21:56 -07:00
safecopy Update canonical repository. 2019-06-13 16:50:15 -07:00
BUILD Avoid importing platforms from many source files 2019-07-03 22:51:26 -07:00
context.go Update canonical repository. 2019-06-13 16:50:15 -07:00
mmap_min_addr.go Update canonical repository. 2019-06-13 16:50:15 -07:00
platform.go Avoid importing platforms from many source files 2019-07-03 22:51:26 -07:00