From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752847AbbJFOXq (ORCPT ); Tue, 6 Oct 2015 10:23:46 -0400 Received: from mga01.intel.com ([192.55.52.88]:43591 "EHLO mga01.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752812AbbJFOXm (ORCPT ); Tue, 6 Oct 2015 10:23:42 -0400 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.17,644,1437462000"; d="scan'208";a="820590904" Subject: Re: [tip:x86/mm] x86/mm: Warn on W^X mappings To: bp@alien8.de, luto@amacapital.net, peterz@infradead.org, sds@tycho.nsa.gov, keescook@chromium.org, torvalds@linux-foundation.org, efault@gmx.de, linux-kernel@vger.kernel.org, mingo@kernel.org, hpa@zytor.com, tglx@linutronix.de, brgerst@gmail.com, dvlasenk@redhat.com, linux-tip-commits@vger.kernel.org References: <1444064120-11450-1-git-send-email-sds@tycho.nsa.gov> From: Arjan van de Ven Message-ID: <5613D96C.8080407@linux.intel.com> Date: Tue, 6 Oct 2015 07:23:40 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 10/6/2015 2:54 AM, tip-bot for Stephen Smalley wrote: > Commit-ID: e1a58320a38dfa72be48a0f1a3a92273663ba6db > Gitweb: http://git.kernel.org/tip/e1a58320a38dfa72be48a0f1a3a92273663ba6db > Author: Stephen Smalley > AuthorDate: Mon, 5 Oct 2015 12:55:20 -0400 > Committer: Ingo Molnar > CommitDate: Tue, 6 Oct 2015 11:11:48 +0200 > > x86/mm: Warn on W^X mappings > > Warn on any residual W+X mappings after setting NX > if DEBUG_WX is enabled. Introduce a separate > X86_PTDUMP_CORE config that enables the code for > dumping the page tables without enabling the debugfs > interface, so that DEBUG_WX can be enabled without > exposing the debugfs interface. Switch EFI_PGT_DUMP > to using X86_PTDUMP_CORE so that it also does not require > enabling the debugfs interface. I like it, so Acked-by: Arjan van de Ven I also have/had an old userland script to do similar checks but using the debugfs interface... ... would that be useful to have somewhere more central? http://git.fenrus.org/tmp/i386-check-pagetables.pl