Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-28 Thread Kees Cook
On Thu, Jan 28, 2016 at 6:59 AM, Mark Rutland wrote: > On Thu, Jan 28, 2016 at 06:06:53AM -0800, Kees Cook wrote: >> On Thu, Jan 28, 2016 at 3:06 AM, Mark Rutland wrote: >> > One thing I would like to do is to avoid the need for fixup_executable >> > entirely, by mapping the kernel text RO from t

Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-28 Thread Mark Rutland
On Thu, Jan 28, 2016 at 06:06:53AM -0800, Kees Cook wrote: > On Thu, Jan 28, 2016 at 3:06 AM, Mark Rutland wrote: > > One thing I would like to do is to avoid the need for fixup_executable > > entirely, by mapping the kernel text RO from the outset. However, that > > requires rework of the alterna

Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-28 Thread Kees Cook
On Thu, Jan 28, 2016 at 3:06 AM, Mark Rutland wrote: > One thing I would like to do is to avoid the need for fixup_executable > entirely, by mapping the kernel text RO from the outset. However, that > requires rework of the alternatives patching (to use a temporary RW > alias), and I haven't had t

Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-28 Thread Mark Rutland
Hi, On Wed, Jan 27, 2016 at 05:09:06PM -0700, David Brown wrote: > From 2efef8aa0f8f7f6277ffebe4ea6744fc93d54644 Mon Sep 17 00:00:00 2001 > From: David Brown > Date: Wed, 27 Jan 2016 13:58:44 -0800 > > This removes the CONFIG_DEBUG_RODATA option and makes it always > enabled. > > Signed-off-by:

Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-28 Thread Ard Biesheuvel
On 28 January 2016 at 01:14, Kees Cook wrote: > On Wed, Jan 27, 2016 at 4:09 PM, David Brown wrote: >> From 2efef8aa0f8f7f6277ffebe4ea6744fc93d54644 Mon Sep 17 00:00:00 2001 >> From: David Brown >> Date: Wed, 27 Jan 2016 13:58:44 -0800 >> >> This removes the CONFIG_DEBUG_RODATA option and makes

Re: [PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-27 Thread Kees Cook
On Wed, Jan 27, 2016 at 4:09 PM, David Brown wrote: > From 2efef8aa0f8f7f6277ffebe4ea6744fc93d54644 Mon Sep 17 00:00:00 2001 > From: David Brown > Date: Wed, 27 Jan 2016 13:58:44 -0800 > > This removes the CONFIG_DEBUG_RODATA option and makes it always > enabled. > > Signed-off-by: David Brown

[PATCH] arm64: make CONFIG_DEBUG_RODATA non-optional

2016-01-27 Thread David Brown
From 2efef8aa0f8f7f6277ffebe4ea6744fc93d54644 Mon Sep 17 00:00:00 2001 From: David Brown Date: Wed, 27 Jan 2016 13:58:44 -0800 This removes the CONFIG_DEBUG_RODATA option and makes it always enabled. Signed-off-by: David Brown --- v1: This is in the same spirit as the x86 patch, removing allo