Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 16 Nov 2016 10:22:57 -0500
From: Rik van Riel <>
Cc: Kees Cook <>
Subject: Re: patches for __write_rarely section

On Wed, 2016-11-16 at 22:39 +0800, Gengjia Chen wrote:
> Hello kees and everyone :
> This email introduces two patches.
> Patch 1 introduce the write-rarely memory section for
> those kernel objects which are read only mostly 
> but need to be written to sometimes.
> Patch 2 introduce two helper functions (mark_wrdata_rw/
> mark_wrdata_ro) to make __write_rarely memory section
> writable or unwritable. They play like the pax_open_kernel/
> pax_close_kernel functions in grsecurity patch.Right now 
> this only been implemented on arm32.

Is this the way we want to go with this, or could it
make more sense to have a special ELF section in the
kernel that is allowed to write to write-rarely memory,
and have the exception handler deal with writes coming
from that code?

That way it would be much harder to insert code into the
kernel that calls your mark_wrdata_rw/mark_wrdata_ro

All Rights Reversed.
Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.