Re: [PATCH] x86, kernel: make dump_pagetables a tristate

2013-07-01 Thread Kees Cook
On Mon, Jul 1, 2013 at 9:35 AM, Arjan van de Ven wrote: > On 7/1/2013 8:55 AM, Kees Cook wrote: >> >> On Mon, Jul 1, 2013 at 6:58 AM, Arjan van de Ven >> wrote: >>> >>> On 6/29/2013 9:05 PM, Kees Cook wrote: Being able to examine page tables is handy, so make this a module that >>>

Re: [PATCH] x86, kernel: make dump_pagetables a tristate

2013-07-01 Thread Arjan van de Ven
On 7/1/2013 8:55 AM, Kees Cook wrote: On Mon, Jul 1, 2013 at 6:58 AM, Arjan van de Ven wrote: On 6/29/2013 9:05 PM, Kees Cook wrote: Being able to examine page tables is handy, so make this a module that can be loaded as needed. I personally don't think this is a good idea due to the variou

Re: [PATCH] x86, kernel: make dump_pagetables a tristate

2013-07-01 Thread Kees Cook
On Mon, Jul 1, 2013 at 6:58 AM, Arjan van de Ven wrote: > On 6/29/2013 9:05 PM, Kees Cook wrote: >> >> Being able to examine page tables is handy, so make this a module that >> can be loaded as needed. > > I personally don't think this is a good idea due to the various > security/etc implications

Re: [PATCH] x86, kernel: make dump_pagetables a tristate

2013-07-01 Thread Arjan van de Ven
On 6/29/2013 9:05 PM, Kees Cook wrote: Being able to examine page tables is handy, so make this a module that can be loaded as needed. I personally don't think this is a good idea due to the various security/etc implications of this feature... should really just be off for non-debug kernels, no

[PATCH] x86, kernel: make dump_pagetables a tristate

2013-06-29 Thread Kees Cook
Being able to examine page tables is handy, so make this a module that can be loaded as needed. Signed-off-by: Kees Cook --- arch/x86/Kconfig.debug|2 +- arch/x86/kernel/head.c|6 ++ arch/x86/mm/dump_pagetables.c | 13 ++--- 3 files changed, 17 insertions(+)