Re: [kernel-hardening] [PATCH 0/2] introduce post-init read-only memory

H. Peter Anvin
2015-11-25T19:07:37Z

On 11/25/2015 10:54 AM, Kees Cook wrote:
>>
>> We should not wait for compile-time support, that doesn't make any
>> sense. What would be useful would be a way to override this on the
>> command line -- that way, if disabling RO or RO-after-init memory makes
>> something work, we have an instant diagnosis.
>
> Seems easiest to have an arg just skip calling mark_rodata_ro(). I can add that.
>

Exactly.

-hpa