Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1333235

Re: [kernel-hardening] [PATCH] arm64: vdso: Mark vDSO code as read-only

From David Brown <david.brown@linaro.org>
Newsgroups linux.kernel
Subject Re: [kernel-hardening] [PATCH] arm64: vdso: Mark vDSO code as read-only
Date 2016-02-13 01:40 +0100
Message-ID <r1wpH-5UM-3@gated-at.bofh.it> (permalink)
References <r0KXM-7U9-13@gated-at.bofh.it> <r10gd-1uu-79@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Thu, Feb 11, 2016 at 03:19:20PM +0100, Ard Biesheuvel wrote:

>> diff --git a/arch/arm64/kernel/vdso/vdso.S b/arch/arm64/kernel/vdso/vdso.S
>> index 60c1db5..db7c0f2 100644
>> --- a/arch/arm64/kernel/vdso/vdso.S
>> +++ b/arch/arm64/kernel/vdso/vdso.S
>> @@ -24,6 +24,7 @@
>>         __PAGE_ALIGNED_DATA
>
>^^ You can get rid of this now as well

Can we?  The page is getting mapped to userspace, and if we didn't
page align it, we could leak kernel read-only data to every userspace
process.

David

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH] arm64: vdso: Mark vDSO code as read-only David Brown <david.brown@linaro.org> - 2016-02-10 23:00 +0100
  Re: [PATCH] arm64: vdso: Mark vDSO code as read-only Will Deacon <will.deacon@arm.com> - 2016-02-11 14:50 +0100
  Re: [kernel-hardening] [PATCH] arm64: vdso: Mark vDSO code as read-only Ard Biesheuvel <ard.biesheuvel@linaro.org> - 2016-02-11 15:20 +0100
    Re: [kernel-hardening] [PATCH] arm64: vdso: Mark vDSO code as  read-only David Brown <david.brown@linaro.org> - 2016-02-13 01:40 +0100
      Re: [kernel-hardening] [PATCH] arm64: vdso: Mark vDSO code as read-only Ard Biesheuvel <ard.biesheuvel@linaro.org> - 2016-02-13 10:10 +0100
  Re: [PATCH] arm64: vdso: Mark vDSO code as read-only Catalin Marinas <catalin.marinas@arm.com> - 2016-02-16 19:30 +0100

csiph-web