efi/x86: righten memory protections at runtime
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 0 repliesNew
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | x86/mm: fix NX bit clearing issue in kernel_map_pages_in_pgdarch/ | +1 | 0 replies | |
| 2/3 | efi/x86: don't map the entire kernel text RW for mixed modearch/ | +2 | 0 replies | |
| 3/3 | efi/x86: avoid RWX mappings for all of DRAMarch/ | +13 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/3] efi/x86: righten memory protections at runtime
For historical reasons, the EFI startup code uses R/W/X mappings for most memory regions that it maps, and in the mixed mode case, it even maps all of DRAM R/W/X in its 1:1 mapping.
Let's tighten this a bit, and use the NX bit where possible, and ensure that at least the kernel text+rodata are not mapped RWX in the mixed mode case.
Cc Andy Lutomirski <[email protected]>
Cc Ingo Molnar <[email protected]>
Ard Biesheuvel (3):
x86/mm: fix NX bit clearing issue in kernel_map_pages_in_pgd efi/x86: don't map the entire kernel text RW for mixed mode efi/x86: avoid RWX mappings for all of DRAM
arch/x86/mm/pageattr.c | 8 +------- arch/x86/platform/efi/efi_64.c | 21 ++++++++++++++------ 2 files changed, 16 insertions(+), 13 deletions(-)
Signature · 1 line
2.17.1