Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Current state of Xorg, KMS, and iopl/ioperm
Date: Thu, 31 Jan 2013 03:24:59
Message-Id: 6db76ad7ad440c08126a72605efd428d.squirrel@atoth.sote.hu
In Reply to: [gentoo-hardened] Current state of Xorg, KMS, and iopl/ioperm by Dave Armstrong
1 Hahh, it's a nice one!
2 Since I'm using radeon KMS, I would happily enable the option.
3 Any of you aware other software might fail by toggling the option?
4 --
5 dr Tóth Attila, Radiológus, 06-20-825-8057
6 Attila Toth MD, Radiologist, +36-20-825-8057
7
8 2013.Január 31.(Cs) 00:32 időpontban Dave Armstrong ezt írta:
9 > Patching the Linux kernel to disable the sys_iopl and sys_ioperm system
10 > calls (e.g., by setting CONFIG_GRKERNSEC_IO=y) used to cause the xserver
11 > to fail to start even with KMS-enabled drivers -- at least in the case
12 > of the in-kernel radeon driver.
13 >
14 > I don't know what recent changes are responsible but for whatever
15 > reason, X now works fine without the aforementioned system calls on the
16 > same hardware.
17 >
18 > Unfortunately, it doesn't work on another machine using the Intel driver
19 > and same X/kernel versions. It fails with the error: "failed to set
20 > IOPL". Does anyone know why the Intel, but not Radeon driver, might be
21 > failing? I don't have any particular knowledge of the inner-workings of
22 > the graphics stack
23 >
24 > A quick search turned up the following on the X mailing list: "Fix
25 > initialization when iopl is forbidden":
26 > http://lists.x.org/archives/xorg-devel/2012-September/033656.html
27 >
28 > http://cgit.freedesktop.org/~ajax/xserver/patch/?id=d88fb00d791c2b19cf9dd244276838aba3a6b442
29 >
30 > The above patch applies to x11-base/xorg-server-1.13.2 (with a fuzz
31 > factor of 2 but it's good) but I haven't had a chance to test it on the
32 > affected machine. I'll post a followup if it fixes the problem.
33 >
34 > Dave
35 >
36 >