tree 49fee1158c659060ffdc008248a747965eac2838
parent 49e6c74d2b9ed75e2794dbb78de62645d9d188d6
author Linus Torvalds <torvalds@linux-foundation.org> 1460660737 -0700
committer Maarten Derks <maarten@fairphone.com> 1555404820 +0200

/proc/iomem: only expose physical resource addresses to privileged users

commit 51d7b120418e99d6b3bf8df9eb3cc31e8171dee4 upstream.

In commit c4004b02f8e5b ("x86: remove the kernel code/data/bss resources
from /proc/iomem") I was hoping to remove the phyiscal kernel address
data from /proc/iomem entirely, but that had to be reverted because some
system programs actually use it.

This limits all the detailed resource information to properly
credentialed users instead.

Issue: SEC-1716
Bug: 117422211
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Mark Salyzyn <salyzyn@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: Ia829ad3659bd36b959ee5f446dca53c5aa4d5654
(cherry picked from commit 87a895c7cbd74650473f9a71afb9a01c64412444)