From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail143.messagelabs.com (mail143.messagelabs.com [216.82.254.35]) by kanga.kvack.org (Postfix) with SMTP id 0991A8D003B for ; Wed, 20 Apr 2011 10:52:24 -0400 (EDT) Subject: Re: [PATCH v3 2.6.39-rc1-tip 12/26] 12: uprobes: slot allocation for uprobes References: <20110401143223.15455.19844.sendpatchset@localhost6.localdomain6> <20110401143457.15455.64839.sendpatchset@localhost6.localdomain6> <1303145171.32491.886.camel@twins> <20110419062654.GB10698@linux.vnet.ibm.com> From: fche@redhat.com (Frank Ch. Eigler) Date: Wed, 20 Apr 2011 10:51:45 -0400 In-Reply-To: (Eric Paris's message of "Wed, 20 Apr 2011 09:40:57 -0400") Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-linux-mm@kvack.org List-ID: To: Eric Paris Cc: Srikar Dronamraju , int-list-linux-mm@kvack.orglinux-mm@kvack.org, Peter Zijlstra , James Morris , Ingo Molnar , Steven Rostedt , Arnaldo Carvalho de Melo , Linus Torvalds , Jonathan Corbet , Christoph Hellwig , Masami Hiramatsu , Thomas Gleixner , Ananth N Mavinakayanahalli , Oleg Nesterov , Andrew Morton , SystemTap , Jim Keniston , Roland McGrath , Andi Kleen , LKML , Eric Paris , sds@tycho.nsa.gov eparis wrote: > [...] > Now how to fix the problems you were seeing. If you run a modern > system with a GUI I'm willing to bet the pop-up window told you > exactly how to fix your problem. [...] > > 1) chcon -t unconfined_execmem_t /path/to/your/binary > 2) setsebool -P allow_execmem 1 > [...] > I believe there was a question about how JIT's work with SELinux > systems. They work mostly by method #1. Actually, that's a solution to a different problem. Here, it's not particular /path/to/your/binaries that want/need selinux provileges. It's a kernel-driven debugging facility that needs it temporarily for arbitrary processes. It's not like JITs, with known binary names. It's not like GDB, which simply overwrites existing instructions in the text segment. To make uprobes work fast (single-step-out-of-line), one needs one or emore temporary pages with unusual mapping permissions. - FChE -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: email@kvack.org