Re: [PATCH v2 1/2] powerpc/rtas: Restrict RTAS requests from userspace

On Thu, 20 Aug 2020 14:45:12 +1000, Andrew Donnellan wrote:

A number of userspace utilities depend on making calls to RTAS to retrieve information and update various things.

The existing API through which we expose RTAS to userspace exposes more RTAS functionality than we actually need, through the sys_rtas syscall, which allows root (or anyone with CAP_SYS_ADMIN) to make any RTAS call they want with arbitrary arguments.

[...]

Applied to powerpc/next.

[1/2] powerpc/rtas: Restrict RTAS requests from userspace https://git.kernel.org/powerpc/c/bd59380c5ba4147dcbaad3e582b55ccfd120b764 [2/2] selftests/powerpc: Add a rtas_filter selftest https://git.kernel.org/powerpc/c/dc9af82ea0614bb138705d1f5230d53b3b1dfb83

cheers