Writing to MSRs should not be allowed if the kernel is locked down, since
it could lead to execution of arbitrary code in kernel mode.  Based on a
patch by Kees Cook.
Signed-off-by: NMatthew Garrett <mjg59@google.com>
Signed-off-by: NDavid Howells <dhowells@redhat.com>
Acked-by: NKees Cook <keescook@chromium.org>
Reviewed-by: NThomas Gleixner <tglx@linutronix.de>
cc: x86@kernel.org
Signed-off-by: NJames Morris <jmorris@namei.org>