Messages in this thread | | | Date | Fri, 18 Jun 2010 22:50:10 -0700 | From | Kees Cook <> | Subject | [PATCH v2 0/4] x86: clear XD_DISABLED flag on Intel to regain NX |
| |
This will clear the MSR_IA32_MISC_ENABLE_XD_DISABLE bit so that NX cannot be inappropriately controlled by the BIOS on Intel CPUs. If NX actually needs to be disabled, "noexec=off" can be used.
Based on feedback from HPA, this was reworked to extend the existing "verify_cpu" routines, and to more tightly confine which CPUs will call MSR_IA32_MISC_ENABLE. Since it includes some re-arrangements of files, I tried to break the patches up into their logical steps.
-Kees
-- Kees Cook Ubuntu Security Team
| |