The patch titled
Subject: CMA: mo no enable it by default
has been removed from the -mm tree. Its filename was
cma-do-no-enable-it-by-default.patch
This patch was dropped because it was nacked
The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/
------------------------------------------------------
From: Borislav Petkov <borislav.petkov@xxxxxxx>
Subject: CMA: mo no enable it by default
CROSS_MEMORY_ATTACH is a MPI feature which shouldn't be enabled by default
on every linux system simply because the majority of users do not need it.
In the config option it says "... which allow a process with the correct
privileges to directly read from or write to to another process's address
space." but this is the normal ptrace case where if one process has the
required privileges, it can access another process' address space.
So disable it - people who really need that normally know what they're
doing and also know how to enable it.
Signed-off-by: Borislav Petkov <borislav.petkov@xxxxxxx>
Cc: Christopher Yeoh <cyeoh@xxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
---
mm/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff -puN mm/Kconfig~cma-do-no-enable-it-by-default mm/Kconfig
--- a/mm/Kconfig~cma-do-no-enable-it-by-default
+++ a/mm/Kconfig
@@ -352,7 +352,7 @@ endchoice
config CROSS_MEMORY_ATTACH
bool "Cross Memory Support"
depends on MMU
- default y
+ default n
help
Enabling this option adds the system calls process_vm_readv and
process_vm_writev which allow a process with the correct privileges
_
Patches currently in -mm which might be from borislav.petkov@xxxxxxx are
linux-next.patch
--
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
