Messages in this thread | | | Date | Mon, 14 Feb 2011 13:19:43 -0800 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH] NX protection for kernel data : fix 32 bits S3 suspend |
| |
On 02/07/2011 11:59 AM, castet.matthieu@free.fr wrote: > > For .39 I hope we could remove most of the RWX rights after init (This means > make low memory trampoline NX or !RW).
By the way, I think this is the wrong goal. I think we should have things enabled at their lowest permission level *as early as possible*. The current model of tightening down permissions late in the boot is really the wrong model.
-hpa
-- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf.
| |