Re: [PATCH] x86, mm: set NX across entire PMD at boot

2014-11-14 Thread Thomas Gleixner
On Fri, 14 Nov 2014, Kees Cook wrote: > When setting up permissions on kernel memory at boot, the end of the > PMD that was split from bss remained executable. It should be NX like > the rest. This performs a PMD alignment instead of a PAGE alignment to > get the correct span of memory. > >

Re: [PATCH] x86, mm: set NX across entire PMD at boot

2014-11-14 Thread Thomas Gleixner
On Fri, 14 Nov 2014, Kees Cook wrote: When setting up permissions on kernel memory at boot, the end of the PMD that was split from bss remained executable. It should be NX like the rest. This performs a PMD alignment instead of a PAGE alignment to get the correct span of memory. Before: