[PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-14 Thread Kees Cook
This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. The read-only areas are made writable during ftrace updates. Additional work is

[PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-14 Thread Kees Cook
This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. The read-only areas are made writable during ftrace updates. Additional work is

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Kees Cook
On Wed, Apr 9, 2014 at 12:52 PM, Laura Abbott wrote: > On 4/9/2014 9:12 AM, Kees Cook wrote: >> On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper wrote: >>> Hi Kees, >>> >>> On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: This introduces CONFIG_DEBUG_RODATA, making kernel text and

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Laura Abbott
On 4/9/2014 9:12 AM, Kees Cook wrote: > On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper wrote: >> Hi Kees, >> >> On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: >>> This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata >>> read-only. Additionally, this splits rodata from text

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Kees Cook
On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper wrote: > Hi Kees, > > On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: >> This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata >> read-only. Additionally, this splits rodata from text so that rodata can >> also be NX, which may

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Steve Capper
Hi Kees, On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: > This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata > read-only. Additionally, this splits rodata from text so that rodata can > also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. > > The

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Steve Capper
Hi Kees, On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. The

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Kees Cook
On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper steve.cap...@linaro.org wrote: Hi Kees, On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Laura Abbott
On 4/9/2014 9:12 AM, Kees Cook wrote: On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper steve.cap...@linaro.org wrote: Hi Kees, On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata

Re: [PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-09 Thread Kees Cook
On Wed, Apr 9, 2014 at 12:52 PM, Laura Abbott lau...@codeaurora.org wrote: On 4/9/2014 9:12 AM, Kees Cook wrote: On Wed, Apr 9, 2014 at 2:02 AM, Steve Capper steve.cap...@linaro.org wrote: Hi Kees, On Mon, Apr 07, 2014 at 08:15:10PM -0700, Kees Cook wrote: This introduces

[PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-07 Thread Kees Cook
This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. The read-only areas are made writable during ftrace updates. Additional work is

[PATCH v2 2/2] ARM: mm: allow text and rodata sections to be read-only

2014-04-07 Thread Kees Cook
This introduces CONFIG_DEBUG_RODATA, making kernel text and rodata read-only. Additionally, this splits rodata from text so that rodata can also be NX, which may lead to wasted memory when aligning to SECTION_SIZE. The read-only areas are made writable during ftrace updates. Additional work is