Re: [PATCH V10] RO/NX protection for loadable kernel modules

From: H. Peter Anvin
Date: Tue Feb 02 2010 - 01:12:27 EST


On 02/01/2010 07:59 PM, Rusty Russell wrote:
On Tue, 2 Feb 2010 10:09:53 am Siarhei Liakh wrote:
This patch is a logical extension of the protection provided by
CONFIG_DEBUG_RODATA to LKMs. The protection is provided by splitting
module_core and module_init into three logical parts each and setting
appropriate page access permissions for each individual section:

1. Code: RO+X
2. RO data: RO+NX
3. RW data: RW+NX

Thanks, applied!

I also applied this to the -tip tree... do you prefer to carry it or should I leave it as is?

-hpa
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/