Re: [PATCH 08/11] Creation of "pagefault_handler_x86" LSM hook

From: Thomas Gleixner
Date: Mon Jun 12 2017 - 13:32:53 EST


On Mon, 12 Jun 2017, Salvatore Mesoraca wrote:
> Creation of a new hook to let LSM modules handle user-space pagefaults on
> x86.
> It can be used to avoid segfaulting the originating process.
> If it's the case it can modify process registers before returning.

That explains, what you could do with it, but it completely lacks any
rationale WHY this is desired and good behaviour and how that is a security
feature.

Thanks,

tglx