Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759973AbZJMOQ2 (ORCPT ); Tue, 13 Oct 2009 10:16:28 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750943AbZJMOQ1 (ORCPT ); Tue, 13 Oct 2009 10:16:27 -0400 Received: from mx3.mail.elte.hu ([157.181.1.138]:53446 "EHLO mx3.mail.elte.hu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750730AbZJMOQ0 (ORCPT ); Tue, 13 Oct 2009 10:16:26 -0400 Date: Tue, 13 Oct 2009 16:15:27 +0200 From: Ingo Molnar To: Arjan van de Ven Cc: Siarhei Liakh , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, James Morris , Andrew Morton , Andi Kleen , Rusty Russell , Thomas Gleixner , "H. Peter Anvin" , David Howells , Aristeu Rozanski Subject: Re: [PATCH V5] x86: NX protection for kernel data Message-ID: <20091013141527.GA7053@elte.hu> References: <817ecb6f0910121803p52a4049ep4a712545d28bba76@mail.gmail.com> <20091012213229.11898c12@infradead.org> <20091013060312.GA3215@elte.hu> <817ecb6f0910130435q56fcbf63r82fae9b94f3eb199@mail.gmail.com> <20091013070722.6e27b25e@infradead.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20091013070722.6e27b25e@infradead.org> User-Agent: Mutt/1.5.18 (2008-05-17) X-ELTE-SpamScore: X-ELTE-SpamLevel: X-ELTE-SpamCheck: no X-ELTE-SpamVersion: ELTE 2.0 X-ELTE-SpamCheck-Details: Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1745 Lines: 40 * Arjan van de Ven wrote: > On Tue, 13 Oct 2009 07:35:28 -0400 > Siarhei Liakh wrote: > > > ---[ Kernel Mapping ]--- > > 0xc0000000-0xc0100000 1M RW GLB x pte > > -0xc0100000-0xc048d000 3636K ro GLB x pte > > -0xc048d000-0xc04d0000 268K RW GLB x pte > > -0xc04d0000-0xc04d2000 8K RW GLB NX pte > > -0xc04d2000-0xc04d3000 4K RW GLB x pte > > -0xc04d3000-0xc0531000 376K RW GLB NX pte > > -0xc0531000-0xc0600000 828K RW GLB x pte > > +0xc0100000-0xc0381000 2564K ro GLB x pte > > +0xc0381000-0xc048d000 1072K ro GLB NX pte > > +0xc048d000-0xc0600000 1484K RW GLB NX pte > > 0xc0600000-0xf7800000 882M RW PSE GLB NX pmd > > 0xf7800000-0xf79fe000 2040K RW GLB NX pte > > 0xf79fe000-0xf7a00000 8K pte > > =============================================== > > > > looks great to me; the result is > * kernel is ro + x > * rodata is ro + NX > * data is RW + NX > > (and there is no "RW + x", other than the first megabyte... hmm. maybe > we need to look at that as well at some point) Could we cover the first megabyte too please via a (default-disabled) option? Modern Xorg shouldnt mind about that anymore, right? Ingo -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/