Section .static_call_sites holds data structures that need to be sorted and processed only at module load time. The section is never modified afterwards. Make it therefore read-only after module initialization to avoid any (non-)accidental modifications. Changes since v1 [1]: * Rebase the patches. The kernel now has commit 110b1e070f1d ("module: Don't fail module loading when setting ro_after_init section RO failed") which addresses a previous problem with handling ro_after_init sections. [1] https://lore.kernel.org/linux-modules/20241223093840.29417-1-petr.pavlu@xxxxxxxx/ Petr Pavlu (3): module: Constify parameters of module_enforce_rwx_sections() module: Add a separate function to mark sections as read-only after init module: Make .static_call_sites read-only after init kernel/module/internal.h | 7 ++++-- kernel/module/main.c | 18 +++------------ kernel/module/strict_rwx.c | 47 ++++++++++++++++++++++++++++++++++++-- 3 files changed, 53 insertions(+), 19 deletions(-) base-commit: 848e076317446f9c663771ddec142d7c2eb4cb43 -- 2.43.0