Re: [patch V4 2/8] mm/highmem: Provide CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP

From: Linus Torvalds
Date: Thu Nov 19 2020 - 12:20:09 EST


On Thu, Nov 19, 2020 at 12:46 AM Mel Gorman <mgorman@xxxxxxx> wrote:
>
> And not start thinking it as a security hardening option.

It's probably the reverse of a hardening option, since it will cause
mapping of stuff in known and controllable virtual addresses.

Although any kmap'able page is likely to already be something you can
read anyway (ie page cache long after security checks have been done).
So it probably really doesn't matter either way.

The only thing that is certain is that it's going to slow down
important code-paths.

Linus