Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754206Ab1BFXdX (ORCPT ); Sun, 6 Feb 2011 18:33:23 -0500 Received: from terminus.zytor.com ([198.137.202.10]:44088 "EHLO mail.zytor.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754015Ab1BFXdW (ORCPT ); Sun, 6 Feb 2011 18:33:22 -0500 Message-ID: <4D4F2F92.9080902@zytor.com> Date: Sun, 06 Feb 2011 15:32:34 -0800 From: "H. Peter Anvin" User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101209 Fedora/3.1.7-0.35.b3pre.fc14 Thunderbird/3.1.7 MIME-Version: 1.0 To: 7eggert@nurfuerspam.de CC: Bodo Eggert , Ingo Molnar , castet.matthieu@free.fr, Linux Kernel list , linux-security-module@vger.kernel.org, Matthias Hopf , rjw@sisk.pl, Andrew Morton , Thomas Gleixner Subject: Re: [PATCH] NX protection for kernel data : fix 32 bits S3 suspend References: In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1184 Lines: 33 On 02/06/2011 02:30 AM, Bodo Eggert wrote: > H. Peter Anvin wrote: > >> In static_protections() we have: >> >>> /* >>> * The BIOS area between 640k and 1Mb needs to be executable for >>> * PCI BIOS based config access (CONFIG_PCI_GOBIOS) support. >>> */ > > I don't think the CGA/MDA/VGA graphics memory areas should be executable, > and I doubt execute access to these areas is required - is it? > > 0xA000:0000 might be a BIOS area, if it is, you don't have a VGA and the > ROM will be exactly 64K. 0xB800 and 0xB000 SHOULD NOT be a ROM, nobody dared > to use it (I don't remember exactly where ROMs are searched). 0xA0000..0xBFFFF can be ROM if you don't have a VGA card; this is new in PCI 3.x IIRC. However, in legacy systems you will not have ROM in this area. -hpa -- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/