Re: vmm(4) update EPT to match mprotect in intial elf load. (Solo5 using vmm, doesn't involved vmd)

On Thu, Dec 13, 2018 at 10:32:08PM +, Adam Steen wrote: > ‐‐‐ Original Message ‐‐‐ > On Thursday, December 13, 2018 9:36 AM, Mike Larkin > wrote: > > > On Thu, Dec 13, 2018 at 12:41:10AM +, Adam Steen wrote: > > > > > Hi All > > > The Solo5/Mirage tender is in the process of

Re: vmm(4) update EPT to match mprotect in intial elf load. (Solo5 using vmm, doesn't involved vmd)

‐‐‐ Original Message ‐‐‐ On Thursday, December 13, 2018 9:36 AM, Mike Larkin wrote: > On Thu, Dec 13, 2018 at 12:41:10AM +, Adam Steen wrote: > > > Hi All > > The Solo5/Mirage tender is in the process of enforcing that guest executable > > code is not also writable (W^X), but it

Re: vmm(4) update EPT to match mprotect in intial elf load. (Solo5 using vmm, doesn't involved vmd)

On Thu, Dec 13, 2018 at 12:41:10AM +, Adam Steen wrote: > Hi All > > The Solo5/Mirage tender is in the process of enforcing that guest executable > code is not also writable (W^X), but it looks like vmm is not updating EPT > to match the prot from mprotect(). > > further information >

vmm(4) update EPT to match mprotect in intial elf load. (Solo5 using vmm, doesn't involved vmd)

Hi All The Solo5/Mirage tender is in the process of enforcing that guest executable code is not also writable (W^X), but it looks like vmm is not updating EPT to match the prot from mprotect(). further information https://github.com/Solo5/solo5/issues/303#issuecomment-446503933 copied here for