Re: [PATCH v5 1/2] module: verify address is read-only

2017-04-07 Thread Kees Cook
On Thu, Apr 6, 2017 at 6:58 PM, Jessica Yu wrote: > +++ Eddie Kovsky [05/04/17 21:35 -0600]: >> >> Implement a mechanism to check if a module's address is in >> the rodata or ro_after_init sections. It mimics the existing functions >> that test if an address is inside a module's

Re: [PATCH v5 1/2] module: verify address is read-only

2017-04-07 Thread Kees Cook
On Thu, Apr 6, 2017 at 6:58 PM, Jessica Yu wrote: > +++ Eddie Kovsky [05/04/17 21:35 -0600]: >> >> Implement a mechanism to check if a module's address is in >> the rodata or ro_after_init sections. It mimics the existing functions >> that test if an address is inside a module's text section. >>

Re: [PATCH v5 1/2] module: verify address is read-only

2017-04-06 Thread Jessica Yu
+++ Eddie Kovsky [05/04/17 21:35 -0600]: Implement a mechanism to check if a module's address is in the rodata or ro_after_init sections. It mimics the existing functions that test if an address is inside a module's text section. Functions that take a module as an argument will be able to

Re: [PATCH v5 1/2] module: verify address is read-only

2017-04-06 Thread Jessica Yu
+++ Eddie Kovsky [05/04/17 21:35 -0600]: Implement a mechanism to check if a module's address is in the rodata or ro_after_init sections. It mimics the existing functions that test if an address is inside a module's text section. Functions that take a module as an argument will be able to

[PATCH v5 1/2] module: verify address is read-only

2017-04-05 Thread Eddie Kovsky
Implement a mechanism to check if a module's address is in the rodata or ro_after_init sections. It mimics the existing functions that test if an address is inside a module's text section. Functions that take a module as an argument will be able to verify that the module address is in a read-only

[PATCH v5 1/2] module: verify address is read-only

2017-04-05 Thread Eddie Kovsky
Implement a mechanism to check if a module's address is in the rodata or ro_after_init sections. It mimics the existing functions that test if an address is inside a module's text section. Functions that take a module as an argument will be able to verify that the module address is in a read-only