Re: [kernel-hardening] [PATCH v4 0/8] introduce post-init read-only memory

2016-01-23 Thread Geert Uytterhoeven
Hi Kees, On Fri, Jan 22, 2016 at 8:57 PM, Kees Cook wrote: > On Fri, Jan 22, 2016 at 11:16 AM, Laura Abbott wrote: >> Kees had previously pushed a patch to do so but it exposed a couple of >> underlying issues, mostly with low power paths >> (c.f. http://article.gmane.org/gmane.linux.ports.arm.k

Re: [kernel-hardening] [PATCH v4 0/8] introduce post-init read-only memory

2016-01-22 Thread Kees Cook
On Fri, Jan 22, 2016 at 11:16 AM, Laura Abbott wrote: > On 1/22/16 9:19 AM, David Brown wrote: >> >> On Tue, Jan 19, 2016 at 10:08:34AM -0800, Kees Cook wrote: >> >>> This introduces __ro_after_init as a way to mark such memory, and uses >>> it on the x86 vDSO to kill an extant kernel exploitation

Re: [kernel-hardening] [PATCH v4 0/8] introduce post-init read-only memory

2016-01-22 Thread Laura Abbott
On 1/22/16 9:19 AM, David Brown wrote: On Tue, Jan 19, 2016 at 10:08:34AM -0800, Kees Cook wrote: This introduces __ro_after_init as a way to mark such memory, and uses it on the x86 vDSO to kill an extant kernel exploitation method. Also adds a new kernel parameter to help debug future use and

Re: [kernel-hardening] [PATCH v4 0/8] introduce post-init read-only memory

2016-01-22 Thread David Brown
On Tue, Jan 19, 2016 at 10:08:34AM -0800, Kees Cook wrote: This introduces __ro_after_init as a way to mark such memory, and uses it on the x86 vDSO to kill an extant kernel exploitation method. Also adds a new kernel parameter to help debug future use and adds an lkdtm test to check the results