Re: [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx>
Subject: Re: [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack
From: Andy Lutomirski <luto@xxxxxxxxxx>
Date: Thu, 7 Jun 2018 11:50:10 -0700
Cc: LKML <linux-kernel@xxxxxxxxxxxxxxx>, linux-doc@xxxxxxxxxxxxxxx, Linux-MM <linux-mm@xxxxxxxxx>, linux-arch <linux-arch@xxxxxxxxxxxxxxx>, X86 ML <x86@xxxxxxxxxx>, "H. Peter Anvin" <hpa@xxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, Ingo Molnar <mingo@xxxxxxxxxx>, "H. J. Lu" <hjl.tools@xxxxxxxxx>, "Shanbhogue, Vedvyas" <vedvyas.shanbhogue@xxxxxxxxx>, "Ravi V. Shankar" <ravi.v.shankar@xxxxxxxxx>, Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Oleg Nesterov <oleg@xxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, mike.kravetz@xxxxxxxxxx
In-reply-to: <20180607143807.3611-11-yu-cheng.yu@intel.com>
References: <20180607143807.3611-1-yu-cheng.yu@intel.com> <20180607143807.3611-11-yu-cheng.yu@intel.com>

On Thu, Jun 7, 2018 at 7:41 AM Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx> wrote:

blocking remap_file_pages() seems reasonable.  I'm not sure what's
wrong with munmap().

Follow-Ups:
- Re: [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack
  - From: Yu-cheng Yu

References:
- [PATCH 00/10] Control Flow Enforcement - Part (3)
  - From: Yu-cheng Yu
- [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack
  - From: Yu-cheng Yu

Prev by Date: Re: [PATCH 08/10] mm: Prevent mremap of shadow stack
Next by Date: Re: [PATCH 03/10] x86/cet: Signal handling for shadow stack
Previous by thread: [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack
Next by thread: Re: [PATCH 10/10] mm: Prevent munmap and remap_file_pages of shadow stack
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Bugtraq] [Linux OMAP] [Linux MIPS] [eCos] [Asterisk Internet PBX] [Linux API]