tag 7eb714ed63c955a21ebd80ae5462c606b48634c5
tagger Todd Kjos <tkjos@google.com> Mon Feb 04 12:44:19 2019 -0800
object d2f94a9e050d953286a20a55be6550514080f54d

https://source.android.com/security/bulletin/2019-02-01
CVE-2018-10879
CVE-2019-2000
CVE-2019-2001

Fix for CVE-2019-1999 not publicly available yet

commit d2f94a9e050d953286a20a55be6550514080f54d
author Linus Torvalds <torvalds@linux-foundation.org> Thu Apr 14 12:05:37 2016 -0700
committer Todd Kjos <tkjos@google.com> Fri Feb 01 10:56:48 2019 -0800
tree dbceb9b64afec9a1315f60580a93d9b747a2b220
parent 08b866a8f2b408249452e4584b0ed427bf4c7fa2

/proc/iomem: only expose physical resource addresses to privileged users

commit 51d7b120418e99d6b3bf8df9eb3cc31e8171dee4 upstream.

In commit c4004b02f8e5b ("x86: remove the kernel code/data/bss resources
from /proc/iomem") I was hoping to remove the phyiscal kernel address
data from /proc/iomem entirely, but that had to be reverted because some
system programs actually use it.

This limits all the detailed resource information to properly
credentialed users instead.

Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Mark Salyzyn <salyzyn@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>