On Thu, Feb 21, 2019 at 1:36 AM Russell Currey <[email protected]> wrote: > The first three patches of these series are from Christophe's work and are > the bare minimum framework needed to implement the support for radix. > > In patch 3, I have removed from Christophe's patch my implementation of > the 64-bit exception handling code, since we don't have an answer for > making nested exceptions work yet. This is mentioned in the final KUAP > patch. Regardless, this is still a significant security improvement > and greatly narrows the attack surface.
Nice! Am I understanding correctly that with this series powerpc9 and later, using radix, will pass the lkdtm tests for KUAP and KUEP (i.e. EXEC_USERSPACE and ACCESS_USERSPACE)? -- Kees Cook
