Re: [kernel-hardening] Re: [PATCH] x86: make IDT read-only
From: Ingo Molnar
Date: Wed Apr 10 2013 - 05:52:21 EST
* H. Peter Anvin <hpa@xxxxxxxxx> wrote:
> On 04/09/2013 11:22 AM, Kees Cook wrote:
> > Can we create a RO fixed per-cpu area?
> "Fixed" and "percpu" are mutually exclusive...
There's a fixmap area that holds kmap_atomic() percpu mappings:
FIX_KMAP_BEGIN, /* reserved pte's for temporary kernel mappings */
FIX_KMAP_END = FIX_KMAP_BEGIN+(KM_TYPE_NR*NR_CPUS)-1,
In a similar fashion we could use a per CPU high-mapped read-only alias as well
(assuming it fits, memory is pretty tight there).
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/