From mboxrd@z Thu Jan 1 00:00:00 1970 From: Borislav Petkov Subject: Re: [PATCH 1/2] x86: Fix kernel panic when booting with XD disabled in uEFI firmware Date: Tue, 8 Dec 2015 21:56:05 +0100 Message-ID: <20151208205605.GB16417@pd.tnic> References: <20151204164057.GE2514@codeblueprint.co.uk> <17EC94B0A072C34B8DCF0D30AD16044A0288EFC7@BPXM09GP.gisp.nec.co.jp> <20151208122557.GA2518@codeblueprint.co.uk> <20151208141946.GD27180@pd.tnic> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Return-path: Content-Disposition: inline In-Reply-To: Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Kees Cook Cc: Matt Fleming , Kosuke Tatsukawa , Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , "x86-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org" , "linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , "linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" List-Id: linux-efi@vger.kernel.org On Tue, Dec 08, 2015 at 12:30:06PM -0800, Kees Cook wrote: > If we add this for not-nx, I would like to add it for not-rodata too. The W+X thing? I was under the impression we want to fix all those so that the ptdump check doesn't fire anymore. > I've never seen anyone actually use it. I was asked to include it out > of fear of some kind of rogue imagined CPU configuration that mixed NX > and non-NX capable CPUs in a single machine where the forced NX > re-enablement code would cause problems. As you might imagine, I'm not > aware of this case ever being an issue. ;) Right. :) Thanks. -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply.