RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
> > And this prevents the lowmemory to be secured by NX? > What do you mean, when you say "lowmemory"? I mean EF-Segments. Cause we got a kernel oops as we accidentally used ioremap_nocache on a EF-Segment address. Before that usage the EF-Segments weren't secured, afterwards they were. We use

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Marat Buharov
On 4/25/07, Cestonaro, Thilo (external) <[EMAIL PROTECTED]> wrote: And this prevents the lowmemory to be secured by NX? What do you mean, when you say "lowmemory"? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More

RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
> > > > CONFIG_HIGHMEM64G=y > > > > CONFIG_HIGHMEM=y > > > > CONFIG_X86_PAE=y > > > > > > Ok in highmem it's active, whats about lowmem? > > > x86-64 is NX active for lowmem too AFAIK. > > > > It's more of an issue of having PAE enabled. > > Without PAE you are not able to use the the NX bit. >

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread H. Peter Anvin
Cestonaro, Thilo (external) wrote: > Hey, > >> CONFIG_HIGHMEM64G=y >> CONFIG_HIGHMEM=y >> CONFIG_X86_PAE=y > > Ok in highmem it's active, whats about lowmem? It's not highmem vs lowmem, it is that HIGHMEM64G is required for X86_PAE, which is required for NX support. > x86-64 is NX active for

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Tuncer Ayaz
On 4/25/07, Tuncer Ayaz <[EMAIL PROTECTED]> wrote: On 4/25/07, Cestonaro, Thilo (external) <[EMAIL PROTECTED]> wrote: > Hey, > > > CONFIG_HIGHMEM64G=y > > CONFIG_HIGHMEM=y > > CONFIG_X86_PAE=y > > Ok in highmem it's active, whats about lowmem? > x86-64 is NX active for lowmem too AFAIK. It's

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Tuncer Ayaz
On 4/25/07, Cestonaro, Thilo (external) <[EMAIL PROTECTED]> wrote: Hey, > CONFIG_HIGHMEM64G=y > CONFIG_HIGHMEM=y > CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. It's more of an issue of having PAE enabled. Without PAE you are not

RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
Hey, > CONFIG_HIGHMEM64G=y > CONFIG_HIGHMEM=y > CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. Ciao Thilo - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More

RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
Hey, CONFIG_HIGHMEM64G=y CONFIG_HIGHMEM=y CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. Ciao Thilo - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Tuncer Ayaz
On 4/25/07, Cestonaro, Thilo (external) [EMAIL PROTECTED] wrote: Hey, CONFIG_HIGHMEM64G=y CONFIG_HIGHMEM=y CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. It's more of an issue of having PAE enabled. Without PAE you are not able to

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Tuncer Ayaz
On 4/25/07, Tuncer Ayaz [EMAIL PROTECTED] wrote: On 4/25/07, Cestonaro, Thilo (external) [EMAIL PROTECTED] wrote: Hey, CONFIG_HIGHMEM64G=y CONFIG_HIGHMEM=y CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. It's more of an issue

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread H. Peter Anvin
Cestonaro, Thilo (external) wrote: Hey, CONFIG_HIGHMEM64G=y CONFIG_HIGHMEM=y CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? It's not highmem vs lowmem, it is that HIGHMEM64G is required for X86_PAE, which is required for NX support. x86-64 is NX active for lowmem too

RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
CONFIG_HIGHMEM64G=y CONFIG_HIGHMEM=y CONFIG_X86_PAE=y Ok in highmem it's active, whats about lowmem? x86-64 is NX active for lowmem too AFAIK. It's more of an issue of having PAE enabled. Without PAE you are not able to use the the NX bit. That's the way the CPU works,

Re: NonExecutable Bit in 32Bit

2007-04-25 Thread Marat Buharov
On 4/25/07, Cestonaro, Thilo (external) [EMAIL PROTECTED] wrote: And this prevents the lowmemory to be secured by NX? What do you mean, when you say lowmemory? - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo

RE: NonExecutable Bit in 32Bit

2007-04-25 Thread Cestonaro, Thilo \(external\)
And this prevents the lowmemory to be secured by NX? What do you mean, when you say lowmemory? I mean EF-Segments. Cause we got a kernel oops as we accidentally used ioremap_nocache on a EF-Segment address. Before that usage the EF-Segments weren't secured, afterwards they were. We use now

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread Andi Kleen
"Cestonaro, Thilo \(external\)"<[EMAIL PROTECTED]> writes: > is it right, that the NX Bit is not used under i386-Arch but under > x86_64-Arch? It is wrong. -Andi - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread Tuncer Ayaz
On 4/24/07, William Heimbigner <[EMAIL PROTECTED]> wrote: On Tue, 24 Apr 2007, Cestonaro, Thilo (external) wrote: > Hey, > > is it right, that the NX Bit is not used under i386-Arch but > under x86_64-Arch? > When yes, is there a special argument for it not to be used? > > Ciao Thilo I don't

RE: NonExecutable Bit in 32Bit

2007-04-24 Thread Cestonaro, Thilo \(external\)
> I don't think so - some i386 cpus definitely have support for the NX bit. Ok, the cpu's do support it, but the kernel doesn't use it if it is active in the bios. > Would having this be supported in i386 help debugging (and security) > significantly? @William: I don't understand this

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread William Heimbigner
On Tue, 24 Apr 2007, Cestonaro, Thilo (external) wrote: Hey, is it right, that the NX Bit is not used under i386-Arch but under x86_64-Arch? When yes, is there a special argument for it not to be used? Ciao Thilo I don't think so - some i386 cpus definitely have support for the NX bit.

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread William Heimbigner
On Tue, 24 Apr 2007, Cestonaro, Thilo (external) wrote: Hey, is it right, that the NX Bit is not used under i386-Arch but under x86_64-Arch? When yes, is there a special argument for it not to be used? Ciao Thilo I don't think so - some i386 cpus definitely have support for the NX bit.

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread Tuncer Ayaz
On 4/24/07, William Heimbigner [EMAIL PROTECTED] wrote: On Tue, 24 Apr 2007, Cestonaro, Thilo (external) wrote: Hey, is it right, that the NX Bit is not used under i386-Arch but under x86_64-Arch? When yes, is there a special argument for it not to be used? Ciao Thilo I don't think so -

Re: NonExecutable Bit in 32Bit

2007-04-24 Thread Andi Kleen
Cestonaro, Thilo \(external\)[EMAIL PROTECTED] writes: is it right, that the NX Bit is not used under i386-Arch but under x86_64-Arch? It is wrong. -Andi - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo