On Tue, Oct 24, 2017 at 10:06:18AM +0530, Aneesh Kumar K.V wrote: > Ram Pai <linux...@us.ibm.com> writes: > > > powerpc has hardware support to disable execute on a pkey. > > This patch enables the ability to create execute-disabled > > keys. > > Can you summarize here how this works? Access to IAMR is > privileged so how will keys framework work with IAMR? > > -aneesh
right. IAMR will have to programmed through a system call. I have introduced a sys_pkey_modify() which takes a key value and the permission that it wants to enable/disable on that key. This syscall is powerpc specific only for now, since no other arch's need it. The patch is at http://patchwork.ozlabs.org/patch/817961/ -- Ram Pai