On Fri, Aug 18, 2023 at 06:08:52PM +0100, Mark Brown wrote: > On Fri, Aug 11, 2023 at 05:38:24PM +0100, Catalin Marinas wrote: > > > Given that we won't have an mmap(PROT_SHADOW_STACK), are we going to > > have restrictions on mprotect()? E.g. it would be useful to reject a > > PROT_EXEC on the shadow stack. > > mprotect() uses arch_validate_flags() which we're already having cover > this so it's already covered. I searched the patches and there's no change to the arm64 arch_validate_flags(). Maybe I missed it. -- Catalin
