On Thu, Nov 13, 2014 at 12:05:36AM -0600, Steven J. Hill wrote: > From: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx> > > Patch removes eXecute bit in the page tables for HEAP/BSS. It > boosts performance because page marked X is flushed each time > after COW/swap from cache even for cache coherent systems in > Harvard architectures (!cpu_has_ic_fills_f_dc). This patch also > sets eXecute Inhibit (XI) protection of HEAP/BSS on CPUs which > support it, like proAptiv cores. While I generally like the idea to limited execute permission to just what really needs it all approaches to do so have ran into compatibility issue. This patch only modifies the brk space which is a bit of a special case for which I don't know the impact on existing software. Ralf