Re: [PATCH 09/11] security: Protection for exploiting null dereference using mmap

2007-07-10 Thread James Morris
On Tue, 10 Jul 2007, Jan Engelhardt wrote: > > On Jul 8 2007 22:59, James Morris wrote: > >@@ -420,8 +420,12 @@ static int dummy_file_ioctl (struct file *file, > >unsigned int command, > > > > static int dummy_file_mmap (struct file *file, unsigned long reqprot, > > unsi

Re: [PATCH 09/11] security: Protection for exploiting null dereference using mmap

2007-07-10 Thread Jan Engelhardt
On Jul 8 2007 22:59, James Morris wrote: >@@ -420,8 +420,12 @@ static int dummy_file_ioctl (struct file *file, unsigned >int command, > > static int dummy_file_mmap (struct file *file, unsigned long reqprot, > unsigned long prot, >- unsigned lon

[PATCH 09/11] security: Protection for exploiting null dereference using mmap

2007-07-08 Thread James Morris
From: Eric Paris <[EMAIL PROTECTED]> Add a new security check on mmap operations to see if the user is attempting to mmap to low area of the address space. The amount of space protected is indicated by the new proc tunable /proc/sys/vm/mmap_min_addr and defaults to 0, preserving existing behavior