[PATCH v7 00/14] x86/alternative: text_poke() enhancements

Peter Zijlstra peterz at infradead.org
Thu Dec 6 10:03:37 UTC 2018


On Tue, Dec 04, 2018 at 05:33:54PM -0800, Nadav Amit wrote:
> Which leads me to (b) - the patch-set is big "enough" IMHO. Indeed,
> there are open security issues in the kernel when it comes to W^X.  But
> some people would want to use Andy's temporary mm-struct for other uses.
> So additional security hardening may be left for future patches.

Yes, at the very least we should get the first 7 patches merged, since
they work and clean up the text poking irrespective of all that W^X
munging.

(also, I think you lost my ACK)



More information about the Linux-security-module-archive mailing list