Messages in this thread | | | Date | Wed, 25 Nov 2015 11:06:41 -0800 | From | "H. Peter Anvin" <> | Subject | Re: [kernel-hardening] [PATCH 0/2] introduce post-init read-only memory |
| |
On 11/25/2015 10:54 AM, Kees Cook wrote: >> >> We should not wait for compile-time support, that doesn't make any >> sense. What would be useful would be a way to override this on the >> command line -- that way, if disabling RO or RO-after-init memory makes >> something work, we have an instant diagnosis. > > Seems easiest to have an arg just skip calling mark_rodata_ro(). I can add that. >
Exactly.
-hpa
| |