From: Justin M. Forbes <[email protected]> Add CONFIG_EFI_DXE_MEM_ATTRIBUTES
UEFI specification does not guarantee all memory to be accessible for both write and execute as the kernel expects it to be. Use DXE services to check and alter memory protection attributes during boot via EFISTUB to ensure that memory ranges used by the kernel are writable and executable. Signed-off-by: Justin M. Forbes <[email protected]> diff --git a/redhat/configs/common/generic/x86/CONFIG_EFI_DXE_MEM_ATTRIBUTES b/redhat/configs/common/generic/x86/CONFIG_EFI_DXE_MEM_ATTRIBUTES new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/x86/CONFIG_EFI_DXE_MEM_ATTRIBUTES @@ -0,0 +1 @@ +CONFIG_EFI_DXE_MEM_ATTRIBUTES=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1771 _______________________________________________ kernel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
