Re: [PATCH v4 21/36] arm64/mm: Implement map_shadow_stack()

From: Catalin Marinas
Date: Tue Aug 22 2023 - 12:40:59 EST


On Fri, Aug 18, 2023 at 06:08:52PM +0100, Mark Brown wrote:
> On Fri, Aug 11, 2023 at 05:38:24PM +0100, Catalin Marinas wrote:
>
> > Given that we won't have an mmap(PROT_SHADOW_STACK), are we going to
> > have restrictions on mprotect()? E.g. it would be useful to reject a
> > PROT_EXEC on the shadow stack.
>
> mprotect() uses arch_validate_flags() which we're already having cover
> this so it's already covered.

I searched the patches and there's no change to the arm64
arch_validate_flags(). Maybe I missed it.

--
Catalin