Messages in this thread | | | From | "Rafael J. Wysocki" <> | Subject | Re: [PATCH] NX protection for kernel data : fix 32 bits S3 suspend | Date | Mon, 14 Feb 2011 23:50:03 +0100 |
| |
On Monday, February 14, 2011, H. Peter Anvin wrote: > On 02/07/2011 11:59 AM, castet.matthieu@free.fr wrote: > > > > For .39 I hope we could remove most of the RWX rights after init (This means > > make low memory trampoline NX or !RW). > > By the way, I think this is the wrong goal. I think we should have > things enabled at their lowest permission level *as early as possible*. > The current model of tightening down permissions late in the boot is > really the wrong model.
FWIW, I agree.
Rafael
| |