Messages in this thread | | | Date | Wed, 16 May 2012 10:13:37 -0400 | Subject | Re: [PATCH] vfs: fix IMA lockdep circular locking dependency | From | Eric Paris <> |
| |
On Tue, May 15, 2012 at 8:37 PM, Linus Torvalds <torvalds@linux-foundation.org> wrote:
> It does change some things, like say that "->mmap_file()" is only ever > called for actual files, not for anonymous mappings. It doesn't seem > to be sensible to have a security model for anonymous mappings - > there's nothing there to really target. Whatever.
So we would have no checks for anonymous mappings? We actually do have some controls around them today
http://www.akkadia.org/drepper/selinux-mem.html
It's mostly around W+X memory. (or was W now X memory)
Admittedly with the growing prevalence of JiT stuff we are using those protections less and less and less....
Not certain how happy some will be to see them completely disappear....
| |