Messages in this thread | | | Subject | Re: Make LSM_MMAP_MIN_ADDR default match its help text. | From | Eric Paris <> | Date | Tue, 18 Aug 2009 13:50:54 -0400 |
| |
On Tue, 2009-08-18 at 13:47 -0400, Dave Jones wrote: > Commit 788084aba2ab7348257597496befcbccabdc98a3 added the LSM_MMAP_MIN_ADDR > option, whose help text states "For most ia64, ppc64 and x86 users with lots > of address space a value of 65536 is reasonable and should cause no problems." > Which implies that it's default setting was typoed.
Acked-by: Eric Paris <eparis@redhat.com>
This can wait or go now. the tests against this are always a strict > (not >=) and they are always rounded to PAGE_SIZE. Thus both have the same address protections.
-Eric
> Signed-off-by: Dave Jones <davej@redhat.com> > > --- linux-2.6.30.noarch/security/Kconfig~ 2009-08-18 13:45:33.000000000 -0400 > +++ linux-2.6.30.noarch/security/Kconfig 2009-08-18 13:45:36.000000000 -0400 > @@ -116,7 +116,7 @@ config SECURITY_ROOTPLUG > config LSM_MMAP_MIN_ADDR > int "Low address space for LSM to from user allocation" > depends on SECURITY && SECURITY_SELINUX > - default 65535 > + default 65536 > help > This is the portion of low virtual memory which should be protected > from userspace allocation. Keeping a user from writing to low pages
| |