Received: by 2002:a25:8b91:0:0:0:0:0 with SMTP id j17csp3474109ybl; Mon, 3 Feb 2020 00:43:03 -0800 (PST) X-Google-Smtp-Source: APXvYqwTQRRtLil5E1GuGdB9lao6QbLYKLSp6mbp61fBuBLLeYw1JTh5/7jsSoNjin+3kI6q9YUG X-Received: by 2002:aca:ebcb:: with SMTP id j194mr14000008oih.154.1580719382820; Mon, 03 Feb 2020 00:43:02 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1580719382; cv=none; d=google.com; s=arc-20160816; b=o7286Vg2F3urV83gFLW4vGJR1oq9YYCq45SZd4JZgsoJgiimbKxD9MpfVFsjKIvoAc Lj2/xeKMTs+3PniUblej4mSx60nph4ccD1evAJrNiOVQlpGTbqOiomFsqcUp/SC+hLdH CYmBNGr3hKmjUKq3FbOguGRltcoVBZBruVZjC/UiVx6ed6lzCL+6pyBcSQRgy+C/SUfZ mcqcyg+nrNPlVlYjGjpCgg+yqQwgCgPh9IBgMJ02KWodtSzfHTZm7RRLsgeHeynTgCD4 0MSadTKCJ+hXjT8841nqkTbX3YaEPUV1se0J+r8n16Oo2ArD0ImLcLvkHJztN3IPpb9p EG0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:date:cc:to:subject:from:references :in-reply-to:message-id:dkim-signature; bh=zXxrx2m1SDJowSguxWOasR60DRhONTZ9PfPLJMsEsGk=; b=rU4H6bA0/PByPZOde6ONuJEOSaRQIkMyiEXT4mWr1+eUXdUPlUpK+gxdsRt28aX0D5 t0wMvkc2V4NQ4I8N3aLnSFlDMLiWB8B22d7dShTpw/fxG6V0aM9Z+4d3xfEDqVkLxPvR W4BcScg2BC622YlQzga/N4t2UVw9MA88Mg8Z0Hw08jPb0/8GcfYC0OTCaWbAKEl2Zoad ptAmylakm1cqyCS+MJUk8vIXXnAoIJaCeNAuE3yFvwEErg3WAY7hes7QTcsxPDovFqb1 OTsc4dn7UzBFbU4NgSe92XB2+VUh6XCt2JOzCCscyfGIkd01bcjOqnELenB5md+lYNMi vNLA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@c-s.fr header.s=mail header.b=GHuNcdMy; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e7si9244087otp.260.2020.02.03.00.42.51; Mon, 03 Feb 2020 00:43:02 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@c-s.fr header.s=mail header.b=GHuNcdMy; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727664AbgBCHMC (ORCPT + 99 others); Mon, 3 Feb 2020 02:12:02 -0500 Received: from pegase1.c-s.fr ([93.17.236.30]:51994 "EHLO pegase1.c-s.fr" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727652AbgBCHMC (ORCPT ); Mon, 3 Feb 2020 02:12:02 -0500 Received: from localhost (mailhub1-int [192.168.12.234]) by localhost (Postfix) with ESMTP id 489zXX3xwqz9tyK5; Mon, 3 Feb 2020 08:11:56 +0100 (CET) Authentication-Results: localhost; dkim=pass reason="1024-bit key; insecure key" header.d=c-s.fr header.i=@c-s.fr header.b=GHuNcdMy; dkim-adsp=pass; dkim-atps=neutral X-Virus-Scanned: Debian amavisd-new at c-s.fr Received: from pegase1.c-s.fr ([192.168.12.234]) by localhost (pegase1.c-s.fr [192.168.12.234]) (amavisd-new, port 10024) with ESMTP id aGz_x640nC6w; Mon, 3 Feb 2020 08:11:56 +0100 (CET) Received: from messagerie.si.c-s.fr (messagerie.si.c-s.fr [192.168.25.192]) by pegase1.c-s.fr (Postfix) with ESMTP id 489zXX2vF3z9tyK0; Mon, 3 Feb 2020 08:11:56 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=c-s.fr; s=mail; t=1580713916; bh=zXxrx2m1SDJowSguxWOasR60DRhONTZ9PfPLJMsEsGk=; h=In-Reply-To:References:From:Subject:To:Cc:Date:From; b=GHuNcdMy01IK/X8TreWD7MeA8bJYY+BTpR1x0ehKkoxOk9QwfbdBul8W2SejZq4DF A29rr02250lI3dwRtirhwoTD5NybkYe9RmjcFXzjPVDsh3dQfUxxYzfLhyWCESvLan OwUoreow6UamkPwGvpBh9vJGaCuapdsd7Reb5lQc= Received: from localhost (localhost [127.0.0.1]) by messagerie.si.c-s.fr (Postfix) with ESMTP id E7E228B791; Mon, 3 Feb 2020 08:12:00 +0100 (CET) X-Virus-Scanned: amavisd-new at c-s.fr Received: from messagerie.si.c-s.fr ([127.0.0.1]) by localhost (messagerie.si.c-s.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id 4uZrnLnW9Gui; Mon, 3 Feb 2020 08:12:00 +0100 (CET) Received: from po14934vm.idsi0.si.c-s.fr (po15451.idsi0.si.c-s.fr [172.25.230.102]) by messagerie.si.c-s.fr (Postfix) with ESMTP id C49B88B752; Mon, 3 Feb 2020 08:12:00 +0100 (CET) Received: by po14934vm.idsi0.si.c-s.fr (Postfix, from userid 0) id 9925C652AD; Mon, 3 Feb 2020 07:12:00 +0000 (UTC) Message-Id: <027bdbbe337513e360cfec3f05e86dc78360007a.1580713729.git.christophe.leroy@c-s.fr> In-Reply-To: <80ebd9075cd7c8b412c6d5d05f7542f9026642ef.1580713729.git.christophe.leroy@c-s.fr> References: <80ebd9075cd7c8b412c6d5d05f7542f9026642ef.1580713729.git.christophe.leroy@c-s.fr> From: Christophe Leroy Subject: [PATCH v3 5/7] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig To: Benjamin Herrenschmidt , Paul Mackerras , Michael Ellerman , ruscur@russell.cc Cc: linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org Date: Mon, 3 Feb 2020 07:12:00 +0000 (UTC) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Russell Currey skiroot_defconfig is the only powerpc defconfig with STRICT_KERNEL_RWX enabled, and if you want memory protection for kernel text you'd want it for modules too, so enable STRICT_MODULE_RWX there. Acked-by: Joel Stanley Signed-off-by: Russell Currey --- v3: no change v2: no change --- arch/powerpc/configs/skiroot_defconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig index 1b6bdad36b13..66d20dbe67b7 100644 --- a/arch/powerpc/configs/skiroot_defconfig +++ b/arch/powerpc/configs/skiroot_defconfig @@ -51,6 +51,7 @@ CONFIG_CMDLINE="console=tty0 console=hvc0 ipr.fast_reboot=1 quiet" # CONFIG_PPC_MEM_KEYS is not set CONFIG_JUMP_LABEL=y CONFIG_STRICT_KERNEL_RWX=y +CONFIG_STRICT_MODULE_RWX=y CONFIG_MODULES=y CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_SIG_FORCE=y -- 2.25.0