[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20170607211653.14536-1-tycho@docker.com>
Date: Wed, 7 Jun 2017 15:16:50 -0600
From: Tycho Andersen <tycho@...ker.com>
To: linux-mm@...ck.org
Cc: Juerg Haefliger <juergh@...il.com>,
kernel-hardening@...ts.openwall.com,
Tycho Andersen <tycho@...ker.com>
Subject: [RFC v4 0/3] Add support for eXclusive Page Frame Ownership
Hi all,
I have talked with Juerg about picking up the torch for XPFO [1], and have been
playing around with the set for a bit. I've fixed one memory corruption issue
since v3, and also tried and failed at integrating hugepages support. The code
in patch 3 seems to split up the page and apply the right protections, but
somehow the lkdtm test read succeeds and no fault is generated, and I don't
understand why.
[1]: https://lkml.org/lkml/2016/11/4/245
Thoughts welcome,
Tycho
Juerg Haefliger (2):
mm, x86: Add support for eXclusive Page Frame Ownership (XPFO)
lkdtm: Add tests for XPFO
Tycho Andersen (1):
xpfo: add support for hugepages
Documentation/admin-guide/kernel-parameters.txt | 2 +
arch/x86/Kconfig | 1 +
arch/x86/include/asm/pgtable.h | 22 +++
arch/x86/mm/Makefile | 1 +
arch/x86/mm/pageattr.c | 21 +--
arch/x86/mm/xpfo.c | 82 +++++++++
drivers/misc/Makefile | 1 +
drivers/misc/lkdtm.h | 3 +
drivers/misc/lkdtm_core.c | 1 +
drivers/misc/lkdtm_xpfo.c | 105 ++++++++++++
include/linux/highmem.h | 15 +-
include/linux/xpfo.h | 38 +++++
mm/Makefile | 1 +
mm/page_alloc.c | 2 +
mm/page_ext.c | 4 +
mm/xpfo.c | 210 ++++++++++++++++++++++++
security/Kconfig | 19 +++
17 files changed, 508 insertions(+), 20 deletions(-)
create mode 100644 arch/x86/mm/xpfo.c
create mode 100644 drivers/misc/lkdtm_xpfo.c
create mode 100644 include/linux/xpfo.h
create mode 100644 mm/xpfo.c
--
2.11.0
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
