Re: [RFC][PATCH] s390, postinit-readonly: implement post-init RO

2016-03-08 Thread Heiko Carstens
On Tue, Mar 08, 2016 at 12:43:15PM +0100, Heiko Carstens wrote: > On Tue, Mar 08, 2016 at 09:51:05AM +0100, Christian Borntraeger wrote: > > On 03/08/2016 01:41 AM, Kees Cook wrote: > > > > >> --- a/arch/s390/kernel/vmlinux.lds.S > > >> +++ b/arch/s390/kernel/vmlinux.lds.S > > >> @@ -52,6 +52,12 @

Re: [RFC][PATCH] s390, postinit-readonly: implement post-init RO

2016-03-08 Thread Heiko Carstens
On Tue, Mar 08, 2016 at 09:51:05AM +0100, Christian Borntraeger wrote: > On 03/08/2016 01:41 AM, Kees Cook wrote: > > >> --- a/arch/s390/kernel/vmlinux.lds.S > >> +++ b/arch/s390/kernel/vmlinux.lds.S > >> @@ -52,6 +52,12 @@ SECTIONS > >> > >> RW_DATA_SECTION(0x100, PAGE_SIZE, THREAD_SIZE)

Re: [RFC][PATCH] s390, postinit-readonly: implement post-init RO

2016-03-08 Thread Christian Borntraeger
On 03/08/2016 01:41 AM, Kees Cook wrote: >> --- a/arch/s390/kernel/vmlinux.lds.S >> +++ b/arch/s390/kernel/vmlinux.lds.S >> @@ -52,6 +52,12 @@ SECTIONS >> >> RW_DATA_SECTION(0x100, PAGE_SIZE, THREAD_SIZE) >> >> + . = ALIGN(PAGE_SIZE) missing ";" ? With that and your fixes, this

Re: [RFC][PATCH] s390, postinit-readonly: implement post-init RO

2016-03-07 Thread Kees Cook
On Mon, Mar 7, 2016 at 4:20 PM, Kees Cook wrote: > Since s390 already sets its .rodata section RO from the start, the generic > .data..ro_after_init section is already RO before init runs. For s390, > split the post-init read-only section off separately and handle that > when the call to mark_roda