Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751508AbZGSUUP (ORCPT ); Sun, 19 Jul 2009 16:20:15 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751201AbZGSUUO (ORCPT ); Sun, 19 Jul 2009 16:20:14 -0400 Received: from www.tglx.de ([62.245.132.106]:32957 "EHLO www.tglx.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751132AbZGSUUN (ORCPT ); Sun, 19 Jul 2009 16:20:13 -0400 Date: Sun, 19 Jul 2009 22:18:45 +0200 (CEST) From: Thomas Gleixner To: Siarhei Liakh cc: LKML , linux-security-module@vger.kernel.org, Andi Kleen , Rusty Russell , Arjan van de Ven , Ingo Molnar , James Morris , Andrew Morton , "H. Peter Anvin" , linux-cris-kernel@axis.com, Roland Dreier Subject: Re: [PATCH] x86: NX protection for kernel data In-Reply-To: <817ecb6f0907191243m33cc7369qa09a24416fad7769@mail.gmail.com> Message-ID: References: <817ecb6f0907191243m33cc7369qa09a24416fad7769@mail.gmail.com> User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 908 Lines: 23 On Sun, 19 Jul 2009, Siarhei Liakh wrote: > This patch expands functionality of CONFIG_DEBUG_RODATA to set main > (static) kernel data area as NX. > The following steps are taken to achieve this: > 1. Linker scripts are adjusted so .text always starts and end on a page boundary > 2. Linker scripts are adjusted so .rodata and .data always starts and > end on a page boundary > 3. void mark_nxdata_nx(void) added to arch/x86/mm/init_64.c and > arch/x86/mm/init_32.c with actual functionality: NX is set for all > pages from _etext through _edata Please avoid adding the identical function to both files. arch/x86/mm/init.c is the correct place. Thanks, tglx -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/