Re: enable CONFIG_SECURITY_MMAP_MIN_ADDR

2008-03-12 Thread Andreas Bierfert
On Thu, 14 Feb 2008 12:29:18 -0500 Eric Paris [EMAIL PROTECTED] wrote: My (minimal) testing of wine indicated that it did try to make use of mapping the low pages but it still worked when it couldn't map them. I ask Dan to go ahead and allowed wine to map those pages in selinux policy, but

Re: enable CONFIG_SECURITY_MMAP_MIN_ADDR

2008-02-15 Thread Andreas Bierfert
On Thu, 14 Feb 2008 12:29:18 -0500 Eric Paris [EMAIL PROTECTED] wrote: I guess I should bring it up with the wine community to get a better understanding of exactly why they are trying to map those pages and how it handles those failures (in my case it handled them quite nicely) Keep me in

enable CONFIG_SECURITY_MMAP_MIN_ADDR

2008-02-14 Thread Eric Paris
Looks like rawhide kernels now have the CONFIG_SECURITY_MMAP_MIN_ADDR Kconfig option. In the past I tried to get this enabled by default using sysctl, a fedora kernel patch, and now I've got the Kconfig option in the upstream kernel. Lets set this equal to 65536. I've been running with this

Re: enable CONFIG_SECURITY_MMAP_MIN_ADDR

2008-02-14 Thread Dave Jones
On Thu, Feb 14, 2008 at 12:29:18PM -0500, Eric Paris wrote: My (minimal) testing of wine indicated that it did try to make use of mapping the low pages but it still worked when it couldn't map them Hmm. Graceful fallback is good, but I wonder if it's now using a slower path or something.

Re: enable CONFIG_SECURITY_MMAP_MIN_ADDR

2008-02-14 Thread Adam Jackson
On Thu, 2008-02-14 at 11:09 -0500, Eric Paris wrote: Looks like rawhide kernels now have the CONFIG_SECURITY_MMAP_MIN_ADDR Kconfig option. In the past I tried to get this enabled by default using sysctl, a fedora kernel patch, and now I've got the Kconfig option in the upstream kernel. Lets