This means i386 processes compiled with a recent compiler will get
non executable heap by default now. This is the same default
as a 32bit PAE kernel would use on a NX enabled CPU.
Signed-off-by: Andi Kleen <ak@xxxxxxx>
---
arch/x86_64/kernel/setup64.c | 2 +-
1 files changed, 1 insertion(+), 1 deletion(-)
Index: linux/arch/x86_64/kernel/setup64.c
===================================================================
--- linux.orig/arch/x86_64/kernel/setup64.c
+++ linux/arch/x86_64/kernel/setup64.c
@@ -59,7 +59,7 @@ int __init nonx_setup(char *str)
}
__setup("noexec=", nonx_setup); /* parsed early actually */
-int force_personality32 = READ_IMPLIES_EXEC;
+int force_personality32 = 0;
/* noexec32=on|off
Control non executable heap for 32bit processes.
-
: send the line "unsubscribe linux-x86_64" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
