Re: [PATCH 0/1] SBI: Introduce Physical Memory Protection Extension
Jonathan Behrens <behrensj@...>
There are different sorts of security threats to keep in mind. I'm
generally not a fan of threat models where the "person who legally
purchased the computer" is the threat, but that is admittedly a case
hardware vendors often care about. Another security concern for many
organizations is basically the reverse: somebody has attached an extra
device or some DRAM with unauthorized M-mode code that the operating
system software doesn't know about, and now it is being used to
exfiltrate data from the system. This isn't necessarily the place to try
to resolve this sort of threat, but it is worth keeping in mind that
decisions we make don't make it even harder to address. Jonathan (sorry for the duplicate... my other address isn't subscribed to the mailing list)
On Wed, Apr 1, 2020 at 9:48 PM Nick Kossifidis <mick@...> wrote: Hello all,
|
|