Re: rwx mapping between ex_table and rodata

From: Ingo Molnar
Date: Fri Sep 25 2015 - 03:25:41 EST



* Kees Cook <keescook@xxxxxxxxxxxx> wrote:

> On Thu, Sep 24, 2015 at 1:26 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:
> > Hi,
> >
> > With the attached config and 4.3-rc2 on x86_64, I see the following in /sys/kernel/debug/kernel_page_tables:
> > ...
> > ---[ High Kernel Mapping ]---
> > 0xffffffff80000000-0xffffffff81000000 16M pmd
> > 0xffffffff81000000-0xffffffff81600000 6M ro PSE GLB x pmd
> > 0xffffffff81600000-0xffffffff81775000 1492K ro GLB x pte
> > 0xffffffff81775000-0xffffffff81800000 556K RW GLB x pte
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Btw., I think we should run this lookup automatically in late bootup, if
CONFIG_X86_PTDUMP=y, and print a WARN()ing if there's any RWX permissions in the
mappings.

That makes sure automated testing picks new bugs up.

Thanks,

Ingo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/