mirror of
https://github.com/torvalds/linux.git
synced 2024-11-29 23:51:37 +00:00
6c3a9c9ae0
Move the EFI mixed mode return trampoline RET into .rodata, so it is normally mapped without executable permissions. And given that this snippet of code is really the only kernel code that we ever execute via this 1:1 mapping, let's unmap the 1:1 mapping of the kernel .text, and only map the page that covers the return trampoline with executable permissions. Note that the remainder of .rodata needs to remain mapped into the 1:1 mapping with RO/NX permissions, as literal GUIDs and strings may be passed to the variable routines. Acked-by: Borislav Petkov <bp@suse.de> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> |
||
---|---|---|
.. | ||
atom | ||
ce4100 | ||
efi | ||
geode | ||
intel | ||
intel-mid | ||
intel-quark | ||
iris | ||
olpc | ||
pvh | ||
scx200 | ||
ts5500 | ||
uv | ||
Makefile |