On Thu, Sep 30, 2021 at 09:19:52AM -0700, Brijesh Singh wrote:
> . The thought process is if in the future
> set_direct_map_default_noflush() is improved to restore the large
> mapping then it will all work transparently.
That's only scratching the surface of the *why* this is done so please
explain why this dance is being done in a comment above the code so that
it is clear.
It is not really obvious why that hiding from the direct map is being
done.
Good reason from that memfd_secret mail are:
"* Prevent cross-process secret userspace memory exposures. Once the secret
memory is allocated, the user can't accidentally pass it into the kernel to
be transmitted somewhere. The secreremem pages cannot be accessed via the
direct map and they are disallowed in GUP."
and in general hiding RMP pages from the direct map is a nice additional
protection.
Thx.
--
Regards/Gruss,
Boris.
https://people.kernel.org/tglx/notes-about-netiquette
