gvisor/pkg/sentry/platform/ring0
Liu Hua 7581e84cb6 tss: block userspace access to all I/O ports.
A userspace process (CPL=3) can access an i/o port if the bit corresponding to
the port is set to 0 in the I/O permission bitmap.

Configure the I/O permission bitmap address beyond the last valid byte in the
TSS so access to all i/o ports is blocked.

Signed-off-by: Liu Hua <sdu.liu@huawei.com>
Change-Id: I3df76980c3735491db768f7210e71703f86bb989
PiperOrigin-RevId: 257336518
2019-07-09 22:21:56 -07:00
..
gen_offsets Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
pagetables Update canonical repository. 2019-06-13 16:50:15 -07:00
BUILD Update canonical repository. 2019-06-13 16:50:15 -07:00
defs.go Update canonical repository. 2019-06-13 16:50:15 -07:00
defs_amd64.go Update canonical repository. 2019-06-13 16:50:15 -07:00
entry_amd64.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
entry_amd64.s Fix various spelling issues in the documentation 2019-06-27 14:25:50 -07:00
kernel.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
kernel_amd64.go tss: block userspace access to all I/O ports. 2019-07-09 22:21:56 -07:00
kernel_unsafe.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
lib_amd64.go Update canonical repository. 2019-06-13 16:50:15 -07:00
lib_amd64.s Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
offsets_amd64.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
ring0.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
x86.go Update canonical repository. 2019-06-13 16:50:15 -07:00