Hi Yudong,
Thank you for the translation.
在 2024/6/7 18:55, cuiyudong123@xxxxxxx 写道:
From: Yudong Cui <cuiyudong@xxxxxxxxxx>
Translate the following documents into Chinese:
- userspace-api/mseal.rst
Signed-off-by: Yudong Cui <cuiyudong@xxxxxxxxxx>
Hmm, When I run "make htmldocs", It output WARNING:
home/siyanteng/linux-next/Documentation/translations/zh_CN/userspace-api/mseal.rst:88:
WARNING: Unexpected indentation.
/home/siyanteng/linux-next/Documentation/translations/zh_CN/userspace-api/mseal.rst:124:
WARNING: Title underline too short.
关于哪些内存应该被密封的注意事项:
==============================
/home/siyanteng/linux-next/Documentation/translations/zh_CN/userspace-api/mseal.rst:124:
WARNING: Title underline too short.
关于哪些内存应该被密封的注意事项:
==============================
A compilation test is necessary before sending a patch.
And we also check that the resulting html page(in
Documentation/output/) is correct.
---
.../zh_CN/userspace-api/index.rst | 1 +
.../zh_CN/userspace-api/mseal.rst | 185 ++++++++++++++++++
2 files changed, 186 insertions(+)
create mode 100644 Documentation/translations/zh_CN/userspace-api/mseal.rst
diff --git a/Documentation/translations/zh_CN/userspace-api/index.rst b/Documentation/translations/zh_CN/userspace-api/index.rst
index 5b14721c8264..b7da307ec6bb 100644
--- a/Documentation/translations/zh_CN/userspace-api/index.rst
+++ b/Documentation/translations/zh_CN/userspace-api/index.rst
@@ -27,6 +27,7 @@ Linux 内核用户空间API指南
ebpf/index
sysfs-platform_profile
futex2
+ mseal
TODOList:
diff --git a/Documentation/translations/zh_CN/userspace-api/mseal.rst b/Documentation/translations/zh_CN/userspace-api/mseal.rst
new file mode 100644
index 000000000000..17eb9f271ae7
--- /dev/null
+++ b/Documentation/translations/zh_CN/userspace-api/mseal.rst
@@ -0,0 +1,185 @@
+.. SPDX-License-Identifier: GPL-2.0
+.. include:: ../disclaimer-zh_CN.rst
+
+:Original: Documentation/userspace-api/mseal.rst
+
+:翻译:
+
+ 崔玉栋 Yudong Cui <cuiyudong@xxxxxxxxxx>
+
+=====================
+mseal 简介
+=====================
One English char, one "=".
One Chinese char, two "=".
+
+:作者: Jeff Xu <jeffxu@xxxxxxxxxxxx>
+
+现代cpu支持诸如RW和NX位的内存权限。这个内存权限特性提高了内存损坏bug的安全性。
+攻击者不能只是写入任意内存并将代码指向它,内存必须用X位标记,否则会发生异常。
+
+内存密封进一步保护内存映射本身不受修改。这对于缓解内存损坏问题很有用,
+尤其是在将损坏的指针传递给内存管理系统时。例如,这样的攻击者手段可能会
+破坏控制流完整性保证,因为本应受信任的只读内存可能变得可写,
+或者。text页面可能被重新映射。内存密封可以由运行时加载器自动应用,
+以密封。text和。rodata页面,并且应用程序还可以在运行时额外地密封安全关键数据。
English text:
applied by the runtime loader to seal .text and .rodata pages and
Automatic translation tools also sometimes output content that is difficult
to understand, let's polish it.
Thanks,
Yanteng