gvisor/pkg/sentry/platform/ring0
Liu Hua 7581e84cb6 tss: block userspace access to all I/O ports.
A userspace process (CPL=3) can access an i/o port if the bit corresponding to
the port is set to 0 in the I/O permission bitmap.

Configure the I/O permission bitmap address beyond the last valid byte in the
TSS so access to all i/o ports is blocked.

Signed-off-by: Liu Hua <sdu.liu@huawei.com>
Change-Id: I3df76980c3735491db768f7210e71703f86bb989
PiperOrigin-RevId: 257336518
2019-07-09 22:21:56 -07:00
..
gen_offsets
pagetables
BUILD
defs.go
defs_amd64.go
entry_amd64.go
entry_amd64.s
kernel.go
kernel_amd64.go tss: block userspace access to all I/O ports. 2019-07-09 22:21:56 -07:00
kernel_unsafe.go
lib_amd64.go
lib_amd64.s
offsets_amd64.go
ring0.go
x86.go