lkml.org 
[lkml]   [2015]   [Sep]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH 26/26] x86, pkeys: Documentation

* Andy Lutomirski <luto@amacapital.net> wrote:

> This may mean that we want to have a way for binaries to indicate that they want
> their --x segments to be loaded with a particular protection key. The right way
> to do that might be using an ELF note, and I also want to use ELF notes to allow
> turning off vsyscalls, so maybe it's time to write an ELF note parser in the
> kernel.

That would be absolutely lovely for many other reasons as well, and we should also
add a tool to tools/ to edit/expand/shrink those ELF notes on existing systems.

I.e. make it really easy to augment security policies on an existing distro, using
any filesystem (not just ACL capable ones) and using the binary only. Linux
binaries could carry capabilities information, etc. etc.

Thanks,

Ingo


\
 
 \ /
  Last update: 2015-09-25 09:41    [W:0.113 / U:2.040 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site