From: Kees Cook <keescook@chromium.org> To: linux-kernel@vger.kernel.org Cc: Kees Cook <keescook@chromium.org>, Liu hua <sdu.liu@huawei.com>, Mark Salter <msalter@redhat.com>, Rabin Vincent <rabin@rab.in>, Nikolay Borisov <Nikolay.Borisov@arm.com>, Nicolas Pitre <nicolas.pitre@linaro.org>, Leif Lindholm <leif.lindholm@linaro.org>, Tomasz Figa <t.figa@samsung.com>, Rob Herring <robh@kernel.org>, Doug Anderson <dianders@google.com>, Will Deacon <will.deacon@arm.com>, Laura Abbott <lauraa@codeaurora.org>, Catalin Marinas <catalin.marinas@arm.com>, Russell King - ARM Linux <linux@arm.linux.org.uk>, linux-arm-kernel@lists.infradead.org Subject: [PATCH 0/7] arm: support CONFIG_RODATA Date: Wed, 6 Aug 2014 12:32:37 -0700 [thread overview] Message-ID: <1407353564-21478-1-git-send-email-keescook@chromium.org> (raw) This is a series of patches to support CONFIG_RODATA on ARM, so that the kernel text is RO, and non-text sections default to NX. To support on-the-fly kernel text patching (via ftrace, kprobes, etc), fixmap support has been finalized based on several versions of various patches that are floating around on the mailing list. This series attempts to include the least intrusive version, so that others can build on it for future fixmap work. The series has been heavily tested, and appears to be working correctly: With CONFIG_ARM_PTDUMP, expected page table permissions are seen in /sys/kernel/debug/kernel_page_tables. Using CONFIG_LKDTM, the kernel now correctly detects bad accesses for for the following lkdtm tests via /sys/kernel/debug/provoke-crash/DIRECT: EXEC_DATA WRITE_RO WRITE_KERN ftrace works: CONFIG_FTRACE_STARTUP_TEST passes Enabling tracing works: echo function > /sys/kernel/debug/tracing/current_tracer kprobes works: CONFIG_ARM_KPROBES_TEST passes kexec works: kexec will load and start a new kernel Thanks to everyone who has been testing this series and working on its various pieces! -Kees
WARNING: multiple messages have this Message-ID (diff)
From: keescook@chromium.org (Kees Cook) To: linux-arm-kernel@lists.infradead.org Subject: [PATCH 0/7] arm: support CONFIG_RODATA Date: Wed, 6 Aug 2014 12:32:37 -0700 [thread overview] Message-ID: <1407353564-21478-1-git-send-email-keescook@chromium.org> (raw) This is a series of patches to support CONFIG_RODATA on ARM, so that the kernel text is RO, and non-text sections default to NX. To support on-the-fly kernel text patching (via ftrace, kprobes, etc), fixmap support has been finalized based on several versions of various patches that are floating around on the mailing list. This series attempts to include the least intrusive version, so that others can build on it for future fixmap work. The series has been heavily tested, and appears to be working correctly: With CONFIG_ARM_PTDUMP, expected page table permissions are seen in /sys/kernel/debug/kernel_page_tables. Using CONFIG_LKDTM, the kernel now correctly detects bad accesses for for the following lkdtm tests via /sys/kernel/debug/provoke-crash/DIRECT: EXEC_DATA WRITE_RO WRITE_KERN ftrace works: CONFIG_FTRACE_STARTUP_TEST passes Enabling tracing works: echo function > /sys/kernel/debug/tracing/current_tracer kprobes works: CONFIG_ARM_KPROBES_TEST passes kexec works: kexec will load and start a new kernel Thanks to everyone who has been testing this series and working on its various pieces! -Kees
next reply other threads:[~2014-08-06 19:34 UTC|newest] Thread overview: 30+ messages / expand[flat|nested] mbox.gz Atom feed top 2014-08-06 19:32 Kees Cook [this message] 2014-08-06 19:32 ` [PATCH 0/7] arm: support CONFIG_RODATA Kees Cook 2014-08-06 19:32 ` [PATCH 1/7] arm: use generic fixmap.h Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-07 2:24 ` Laura Abbott 2014-08-07 2:24 ` Laura Abbott 2014-08-07 14:35 ` Kees Cook 2014-08-07 14:35 ` Kees Cook 2014-08-07 15:15 ` Max Filippov 2014-08-07 15:15 ` Max Filippov 2014-08-07 15:22 ` Rob Herring 2014-08-07 15:22 ` Rob Herring 2014-08-07 15:32 ` Nicolas Pitre 2014-08-07 15:32 ` Nicolas Pitre 2014-08-07 15:42 ` Max Filippov 2014-08-07 15:42 ` Max Filippov 2014-08-07 17:23 ` Mark Salter 2014-08-07 17:23 ` Mark Salter 2014-08-06 19:32 ` [PATCH 2/7] arm: fixmap: implement __set_fixmap() Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-06 19:32 ` [PATCH 3/7] arm: mm: reduce fixmap kmap from 32 to 16 CPUS Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-06 19:32 ` [PATCH 4/7] arm: use fixmap for text patching when text is RO Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-06 19:32 ` [PATCH 5/7] ARM: kexec: Make .text R/W in machine_kexec Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-06 19:32 ` [PATCH 6/7] ARM: mm: allow non-text sections to be non-executable Kees Cook 2014-08-06 19:32 ` Kees Cook 2014-08-06 19:32 ` [PATCH 7/7] ARM: mm: allow text and rodata sections to be read-only Kees Cook 2014-08-06 19:32 ` Kees Cook
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=1407353564-21478-1-git-send-email-keescook@chromium.org \ --to=keescook@chromium.org \ --cc=Nikolay.Borisov@arm.com \ --cc=catalin.marinas@arm.com \ --cc=dianders@google.com \ --cc=lauraa@codeaurora.org \ --cc=leif.lindholm@linaro.org \ --cc=linux-arm-kernel@lists.infradead.org \ --cc=linux-kernel@vger.kernel.org \ --cc=linux@arm.linux.org.uk \ --cc=msalter@redhat.com \ --cc=nicolas.pitre@linaro.org \ --cc=rabin@rab.in \ --cc=robh@kernel.org \ --cc=sdu.liu@huawei.com \ --cc=t.figa@samsung.com \ --cc=will.deacon@arm.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.