The patch titled Subject: mm/mmap.c: mark protection_map as __ro_after_init has been added to the -mm tree. Its filename is mark-protection_map-as-__ro_after_init.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/mark-protection_map-as-__ro_after_init.patch and later at http://ozlabs.org/~akpm/mmotm/broken-out/mark-protection_map-as-__ro_after_init.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/SubmitChecklist when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Daniel Micay <danielmicay@xxxxxxxxx> Subject: mm/mmap.c: mark protection_map as __ro_after_init The protection map is only modified by per-arch init code so it can be protected from writes after the init code runs. This change was extracted from PaX where it's part of KERNEXEC. Link: http://lkml.kernel.org/r/20170510174441.26163-1-danielmicay@xxxxxxxxx Signed-off-by: Daniel Micay <danielmicay@xxxxxxxxx> Acked-by: Kees Cook <keescook@xxxxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- mm/mmap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN mm/mmap.c~mark-protection_map-as-__ro_after_init mm/mmap.c --- a/mm/mmap.c~mark-protection_map-as-__ro_after_init +++ a/mm/mmap.c @@ -94,7 +94,7 @@ static void unmap_region(struct mm_struc * w: (no) no * x: (yes) yes */ -pgprot_t protection_map[16] = { +pgprot_t protection_map[16] __ro_after_init = { __P000, __P001, __P010, __P011, __P100, __P101, __P110, __P111, __S000, __S001, __S010, __S011, __S100, __S101, __S110, __S111 }; _ Patches currently in -mm which might be from danielmicay@xxxxxxxxx are mark-protection_map-as-__ro_after_init.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html