Re: [kernel-hardening] [RFC 1/7] arch: add __ro_mostly_after_init section marker

2017-02-20 Thread Ho-Eun Ryu
> On 19 Feb 2017, at 8:24 PM, Ard Biesheuvel wrote: > > On 19 February 2017 at 10:04, Hoeun Ryu wrote: >> After `__ro_after_init` marker is included in kernel, many kernel data >> objects can be read-only-after-init. But there are many other places that >> would be good to read-only-after-init

Re: [kernel-hardening] [RFC 1/7] arch: add __ro_mostly_after_init section marker

2017-02-19 Thread Ard Biesheuvel
On 19 February 2017 at 10:04, Hoeun Ryu wrote: > After `__ro_after_init` marker is included in kernel, many kernel data > objects can be read-only-after-init. But there are many other places that > would be good to read-only-after-init but `__ro_after_init` can not be simply > applicable to them

[RFC 1/7] arch: add __ro_mostly_after_init section marker

2017-02-19 Thread Hoeun Ryu
After `__ro_after_init` marker is included in kernel, many kernel data objects can be read-only-after-init. But there are many other places that would be good to read-only-after-init but `__ro_after_init` can not be simply applicable to them because they should be writable at some points, which ar