From: Borislav Petkov <bp@amd64.org>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Christopher Yeoh <cyeoh@au1.ibm.com>,
Andrew Morton <akpm@linux-foundation.org>,
LKML <linux-kernel@vger.kernel.org>,
Randy Dunlap <rdunlap@xenotime.net>
Subject: [PATCH -v2] CMA: Do no enable it by default
Date: Tue, 5 Jun 2012 20:03:55 +0200 [thread overview]
Message-ID: <20120605180355.GR13495@aftab.osrc.amd.com> (raw)
In-Reply-To: <20120605170921.GO13495@aftab.osrc.amd.com>
From: Borislav Petkov <borislav.petkov@amd.com>
CROSS_MEMORY_ATTACH is a MPI feature which shouldn't be enabled by
default on every linux system simply because the majority of users do
not need it.
In the config option it says "... which allow a process with the correct
privileges to directly read from or write to to another process's
address space." but this is the normal ptrace case where if one process
has the required privileges, it can access another process' address
space.
So disable it - people who really need that normally know what they're
doing and also know how to enable it.
Signed-off-by: Borislav Petkov <borislav.petkov@amd.com>
---
-v2: Correct commit message.
mm/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/mm/Kconfig b/mm/Kconfig
index 82fed4eb2b6f..3b6347cf4c06 100644
--- a/mm/Kconfig
+++ b/mm/Kconfig
@@ -352,7 +352,7 @@ endchoice
config CROSS_MEMORY_ATTACH
bool "Cross Memory Support"
depends on MMU
- default y
+ default n
help
Enabling this option adds the system calls process_vm_readv and
process_vm_writev which allow a process with the correct privileges
--
1.7.11.rc1
--
Regards/Gruss,
Boris.
Advanced Micro Devices GmbH
Einsteinring 24, 85609 Dornach
GM: Alberto Bozzo
Reg: Dornach, Landkreis Muenchen
HRB Nr. 43632 WEEE Registernr: 129 19551
next prev parent reply other threads:[~2012-06-05 18:03 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20120531153512.GK14515@aftab.osrc.amd.com>
2012-05-31 15:42 ` CROSS_MEMORY_ATTACH default y? Borislav Petkov
2012-06-01 1:06 ` Christopher Yeoh
2012-06-05 11:05 ` [PATCH] CMA: Do no enable it by default Borislav Petkov
2012-06-05 16:46 ` Linus Torvalds
2012-06-05 17:09 ` Borislav Petkov
2012-06-05 18:03 ` Borislav Petkov [this message]
2012-06-06 1:24 ` Christopher Yeoh
2012-06-06 12:59 ` Borislav Petkov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20120605180355.GR13495@aftab.osrc.amd.com \
--to=bp@amd64.org \
--cc=akpm@linux-foundation.org \
--cc=cyeoh@au1.ibm.com \
--cc=linux-kernel@vger.kernel.org \
--cc=rdunlap@xenotime.net \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox