Re: [kernel-hardening] Re: [PATCH] x86: make IDT read-only

From: Ingo Molnar
Date: Wed Apr 10 2013 - 05:52:21 EST

* H. Peter Anvin <hpa@xxxxxxxxx> wrote:

> On 04/09/2013 11:22 AM, Kees Cook wrote:
> >
> > Can we create a RO fixed per-cpu area?
> >
> "Fixed" and "percpu" are mutually exclusive...

There's a fixmap area that holds kmap_atomic() percpu mappings:

FIX_KMAP_BEGIN, /* reserved pte's for temporary kernel mappings */

In a similar fashion we could use a per CPU high-mapped read-only alias as well
(assuming it fits, memory is pretty tight there).


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at