On Wed, Oct 21, 2015 at 02:57:47PM +0200, Ard Biesheuvel wrote: > ... For the remaining cases, which is the vast majority, no such > assumptions can be made, and since the UEFI runtime regions are > typically populated with a bunch of PE/COFF images (each of which > consists of text + data), inferring where the boundaries are between > them does not seem tractable (for instance, to only map 'boundary' > pages RWX) How much of a problem would it be if we still do the on-demand page faulting and map a trailing piece of code together with the data in a page RWX? Still better than mapping the *whole* thing RWX, no? -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply. -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html