Date: Wed, 16 Nov 2016 10:22:57 -0500 From: Rik van Riel <riel@...hat.com> To: kernel-hardening@...ts.openwall.com Cc: Kees Cook <keescook@...omium.org> Subject: Re: patches for __write_rarely section On Wed, 2016-11-16 at 22:39 +0800, Gengjia Chen wrote: > Hello kees and everyone : > > This email introduces two patches. > > Patch 1 introduce the write-rarely memory section for > those kernel objects which are read only mostly > but need to be written to sometimes. > > Patch 2 introduce two helper functions (mark_wrdata_rw/ > mark_wrdata_ro) to make __write_rarely memory section > writable or unwritable. They play like the pax_open_kernel/ > pax_close_kernel functions in grsecurity patch.Right now > this only been implemented on arm32. Is this the way we want to go with this, or could it make more sense to have a special ELF section in the kernel that is allowed to write to write-rarely memory, and have the exception handler deal with writes coming from that code? That way it would be much harder to insert code into the kernel that calls your mark_wrdata_rw/mark_wrdata_ro functions. -- All Rights Reversed. Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.