ARM: mm: allow non-text sections to be non-executable

Browse source

Adds CONFIG_ARM_KERNMEM_PERMS to separate the kernel memory regions
into section-sized areas that can have different permisions. Performs
the NX permission changes during free_initmem, so that init memory can be
reclaimed.

This uses section size instead of PMD size to reduce memory lost to
padding on non-LPAE systems.

Based on work by Brad Spengler, Larry Bassel, and Laura Abbott.

Signed-off-by: Kees Cook <keescook@chromium.org>
Tested-by: Laura Abbott <lauraa@codeaurora.org>
Acked-by: Nicolas Pitre <nico@linaro.org>

...

This commit is contained in:

Kees Cook 2014-04-03 17:28:11 -07:00

parent 23a4e4050b

commit 1e6b48116a

4 changed files with 133 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

arch/arm/kernel/vmlinux.lds.S

View file

9

arch/arm/mm/Kconfig

View file

101

arch/arm/mm/init.c

View file

9

arch/arm/mm/mmu.c

View file