The patch titled
Subject: CMA: mo no enable it by default
has been added to the -mm tree. Its filename is
cma-do-no-enable-it-by-default.patch
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/SubmitChecklist when testing your code ***
The -mm tree is included into linux-next and is updated
there every 3-4 working days
------------------------------------------------------
From: Borislav Petkov <borislav.petkov@xxxxxxx>
Subject: CMA: mo no enable it by default
CROSS_MEMORY_ATTACH is a MPI feature which shouldn't be enabled by default
on every linux system simply because the majority of users do not need it.
In the config option it says "... which allow a process with the correct
privileges to directly read from or write to to another process's address
space." but this is the normal ptrace case where if one process has the
required privileges, it can access another process' address space.
So disable it - people who really need that normally know what they're
doing and also know how to enable it.
Signed-off-by: Borislav Petkov <borislav.petkov@xxxxxxx>
Cc: Christopher Yeoh <cyeoh@xxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
---
mm/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff -puN mm/Kconfig~cma-do-no-enable-it-by-default mm/Kconfig
--- a/mm/Kconfig~cma-do-no-enable-it-by-default
+++ a/mm/Kconfig
@@ -352,7 +352,7 @@ endchoice
config CROSS_MEMORY_ATTACH
bool "Cross Memory Support"
depends on MMU
- default y
+ default n
help
Enabling this option adds the system calls process_vm_readv and
process_vm_writev which allow a process with the correct privileges
_
Subject: Subject: CMA: mo no enable it by default
Patches currently in -mm which might be from borislav.petkov@xxxxxxx are
linux-next.patch
cma-do-no-enable-it-by-default.patch
--
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
