Re: [PATCH v5 0/2] provide check for ro_after_init memory sections

From: Andrew Morton
Date: Fri Apr 07 2017 - 18:13:02 EST


On Fri, 7 Apr 2017 14:53:23 -0700 Kees Cook <keescook@xxxxxxxxxxxx> wrote:

> > Eddie Kovsky (2):
> > module: verify address is read-only
> > extable: verify address is read-only
> >
> > include/linux/kernel.h | 2 ++
> > include/linux/module.h | 12 ++++++++++++
> > kernel/extable.c | 29 +++++++++++++++++++++++++++
> > kernel/module.c | 53 ++++++++++++++++++++++++++++++++++++++++++++++++++
> > 4 files changed, 96 insertions(+)
>
> Andrew, do you have these in your mailbox (it went to lkml), or should
> I resend them directly to you? Since they depend on the
> __start_ro_after_init naming fixes in -mm, it seemed like it'd be best
> to carry these two patches there. If so, please consider them both:
>
> Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
>
> (And, from the thread on the module patch, Jessica has Acked that one too.)

Well I grabbed them, but the patches don't actually do anything - they
add interfaces with no users. What's the plan here?