Re: [PATCH v2] module: Harden STRICT_MODULE_RWX

From: Peter Zijlstra
Date: Wed Aug 12 2020 - 16:00:33 EST


On Wed, Aug 12, 2020 at 06:37:57PM +0200, Ard Biesheuvel wrote:
> I know there is little we can do at this point, apart from ignoring
> the permissions - perhaps we should just defer the w^x check until
> after calling module_frob_arch_sections()?

My earlier suggestion was to ignore it for 0-sized sections.