Re: Security fix for remapping of page 0 (was [PATCH] ChangeZERO_SIZE_PTR to point at unmapped space)

From: Linus Torvalds
Date: Wed Jun 03 2009 - 12:20:24 EST




On Wed, 3 Jun 2009, Christoph Lameter wrote:
>
> mmap_min_addr depends on CONFIG_SECURITY which establishes various
> strangely complex "security models".
>
> The system needs to be secure by default.

It _is_ secure by default. You have to do some pretty non-default things
to get away from it.

But I do agree that it might be good to move the thing into the generic
path. I just don't think your arguments are very good. It's not about
defaults, it's about the fact that this isn't worth being hidden by that
security layer.

Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/