linux-kernel - Re: [PATCH] hwmon: Remove xgene driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <86ilph8xu9.fsf@scott-ph-mail.amperecomputing.com>
Date:   Fri, 03 Jun 2022 10:23:58 -0700
From:   D Scott Phillips <scott@...amperecomputing.com>
To:     linux-hwmon@...r.kernel.org
Cc:     Jean Delvare <jdelvare@...e.com>,
        Guenter Roeck <linux@...ck-us.net>,
        linux-kernel@...r.kernel.org, patches@...erecomputing.com,
        Darren Hart <darren@...amperecomputing.com>,
        Ilkka Koskinen <ilkka@...amperecomputing.com>
Subject: Re: [PATCH] hwmon: Remove xgene driver

D Scott Phillips <scott@...amperecomputing.com> writes:

> Similar to the situation in commit 9049572fb145 ("hwmon: Remove amd_energy
> driver"), access to power information can be used as the basis for a side-
> channel attack. Removing unprivileged access to monitoring information
> would effectively make the driver useless, so simply remove the driver.

Well not really useless, there's still baby in this bath water.
Specifically, there's no reason to remove the temperature monitor
capabilities here. Sorry for the noise, I'll come back with something
better thought out.