[PATCH 0/5] arm/arm64: KVM: Tighten memory protection flags
christoffer.dall at linaro.org
Wed Jun 29 05:21:18 PDT 2016
On Mon, Jun 13, 2016 at 03:00:44PM +0100, Marc Zyngier wrote:
> So far, the HYP mappings have been fairly relaxed: everything is
> RWX. Oddly enough, not everybody is fond of this kind of permissions
> at the highest exception level.
> This small series tightens it a bit by making:
> - the text mapping read-only
> - the rodata mapping read-only + no-exec
> - everything else read-write + no-exec
> Of course, that's only valid when VHE is not in action. Tested on
> Seattle and Cubietruck, based on 4.7-rc2.
I have applied this to queue with a RB on all the patches.
It seems like this series applies on top of the merged page tables
stuff, but since I think you're going to repost that, I have just
applied this and fixed up the conflicts.
Could you have a look at kvmarm/queue and let me know if you think it
looks good? (and possibly rebase the merge page tables stuff on top of
there when you rework that series?)
More information about the linux-arm-kernel