{
  "id": "org.fwupd.hsi.Smap",
  "deprecated-ids": [
    "org.fwupd.hsi.IntelSmap"
  ],
  "name": "SMAP",
  "description": [
    "Without Supervisor Mode Access Prevention, the supervisor code usually has full read and write access to user-space memory mappings.",
    "This can make exploits easier to write, as it allows the kernel to access user-space memory when it did not intend to."
  ],
  "failure-impact": [
    "A local or remote attacker can use a simple exploit to modify the contents of kernel memory which can lead to privilege escalation."
  ],
  "failure-results": {
    "not-supported": "SMAP not enabled"
  },
  "success-results": {
    "enabled": "SMAP features are detected and enabled"
  },
  "hsi-level": 4,
  "resolution": "Ensure that the CPU supports this feature, and then contact your OEM, who may be able to issue a firmware update.",
  "references": {
    "https://en.wikipedia.org/wiki/Supervisor_Mode_Access_Prevention": "SMAP Wikipedia Page"
  },
  "fwupd-version": "2.0.0"
}
