Re: [kernel-hardening] [RFC PATCH v3 1/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-09 Thread ZhaoJunmin Zhao(Junmin)
This patch adds support for XPFO which protects against 'ret2dir' kernel attacks. The basic idea is to enforce exclusive ownership of page frames by either the kernel or userspace, unless explicitly requested by the kernel. Whenever a page destined for userspace is allocated, it is unmapped from p

Re: [PATCH v1 0/3] per-process reclaim

2016-06-13 Thread ZhaoJunmin Zhao(Junmin)
app startup time. Can you also share your theory(management policy) on how can the app reduce it's startup time? Thanks. Yes, In Huawei device, we use the interface now! Now according to procsss LRU state in ActivityManagerService, we can reclaim some process in proactive way. Cc: Redmo