On Tue, Apr 4, 2017 at 5:22 PM, Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote: > On Tue, Apr 4, 2017 at 3:55 PM, Linus Torvalds > <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote: >> >> I already explained what the likely fix is: make devmem_is_allowed() >> return a ternary value, so that those things that *do* read the BIOS >> area can just continue to do so, but they see zeroes for the parts >> that the kernel has taken over. > > Actually, a simpler solution might be to > > (a) keep the binary value > > (b) remove the test for the low 1M > > (c) to avoid breakage, don't return _error_, but just always read zero > > that also removes (or at least makes it much more expensive) a signal > of which pages are kernel allocated vs BIOS allocated. This last part (reading zero) is what I'm poking at now. It's not obvious to me yet how to make the mmap interface hand back zero-mapped pages. I'll keep digging... -Kees -- Kees Cook Pixel Security -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>