On Fri, Dec 18, 2015 at 2:28 PM, Andy Lutomirski <l...@amacapital.net> wrote: > > Apps that don't want to use the baseline_pkru mechanism could use > syscalls to claim ownership of protection keys but then manage them > purely with WRPKRU directly. We could optionally disallow > mprotect_key on keys that weren't allocated in advance. > > Does that seem sane?
So everything seems sane except for the need for that baseline_pkru. I'm not seeing why it couldn't just be a fixed value. Is there any real downside to it? Linus -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/