Re: [PATCH] hv: mark hv_driver read only after init

2016-08-15 Thread Stephen Hemminger
On Mon, 15 Aug 2016 09:11:38 -0700 Kees Cook wrote: > On Mon, Aug 15, 2016 at 8:41 AM, Stephen Hemminger > wrote: > > On Fri, 12 Aug 2016 20:05:27 -0700 > > Kees Cook wrote: > > > >> On Fri, Aug 12, 2016 at 4:35 PM, Stephen Hemminger > >> wrote: > >> > > >> > For hardening, the driver stru

Re: [PATCH] hv: mark hv_driver read only after init

2016-08-15 Thread Kees Cook
On Mon, Aug 15, 2016 at 8:41 AM, Stephen Hemminger wrote: > On Fri, 12 Aug 2016 20:05:27 -0700 > Kees Cook wrote: > >> On Fri, Aug 12, 2016 at 4:35 PM, Stephen Hemminger >> wrote: >> > >> > For hardening, the driver structure containing function pointers can >> > be marked read only after initia

Re: [PATCH] hv: mark hv_driver read only after init

2016-08-15 Thread Stephen Hemminger
On Fri, 12 Aug 2016 20:05:27 -0700 Kees Cook wrote: > On Fri, Aug 12, 2016 at 4:35 PM, Stephen Hemminger > wrote: > > > > For hardening, the driver structure containing function pointers can > > be marked read only after initial registration is done. > > Yay more __ro_after_init! (Minor nit b

Re: [PATCH] hv: mark hv_driver read only after init

2016-08-12 Thread Kees Cook
On Fri, Aug 12, 2016 at 4:35 PM, Stephen Hemminger wrote: > > For hardening, the driver structure containing function pointers can > be marked read only after initial registration is done. Yay more __ro_after_init! (Minor nit below...) Also, I wonder if there's a way to do build-time section che

[PATCH] hv: mark hv_driver read only after init

2016-08-12 Thread Stephen Hemminger
For hardening, the driver structure containing function pointers can be marked read only after initial registration is done. Signed-off-by: Stephen Hemminger --- drivers/hid/hid-hyperv.c |2 +- drivers/input/serio/hyperv-keyboard.c |2 +- drivers/net/hyperv/netvsc_drv.c