Re: [PATCH 2/2] x86: Allow disabling of sys_iopl, sys_ioperm

Alan Cox
2011-07-14T23:07:14Z

> I'm suspecting that it might be cleaner to have kernel/ioaccess and
> kernel/ioaccess_lock as two booleans (0 or 1)...

I think firstly you need to decide what you are actually trying to stop
and the scope the problem out properly. Stopping iopl and ioperm without
thinking about the bigger picture is just going to produce nerf security.