> On Mar 9, 2018, at 10:17 AM, Linus Torvalds <torva...@linux-foundation.org> > wrote: >
> > Hmm. I wish we had an "execute blob" model, but we really don't, and > it would be hard/impossible to do without pinning the pages in memory. > Why so hard? We can already execute a struct file for execveat, and Alexei already has this working for umh. Surely we can make an immutable (as in even root can’t write it) kernel-internal tmpfs file, execveat it, then unlink it. And /proc/PID/exe should be openable and readable. The blob itself would be __initdata so it gets discarded after it lands in tmpfs.