Messages in this thread | | | From | Rusty Russell <> | Subject | Re: [PATCH v6] RO/NX protection for loadable kernel modules | Date | Tue, 22 Sep 2009 09:29:29 +0930 |
| |
On Fri, 11 Sep 2009 12:20:47 pm Siarhei Liakh wrote: > +/* > + * LKM RO/NX protection: protect module's text/ro-data > + * from modification and any data from execution. > + */ > +static void set_section_ro_nx(void *base, > + unsigned long text_size, > + unsigned long ro_size, > + unsigned long total_size) > +{ > +#ifdef CONFIG_X86
This is usually considered a bad idea. Make a new config option, CONFIG_HAVE_SET_MEMORY_PROTECTION, select it in arch/x86/Kconfig. Then wrap the entire functions in one #ifdef CONFIG_HAVE_.... and put empty versions in the #else.
Thanks, Rusty.
| |