linux-kernel - Re: JIT emulator needs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <466B06F1.5030509@zytor.com>
Date:	Sat, 09 Jun 2007 13:00:49 -0700
From:	"H. Peter Anvin" <hpa@...or.com>
To:	Albert Cahalan <acahalan@...il.com>
CC:	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: JIT emulator needs

Albert Cahalan wrote:
> There is an SE Linux execmem restriction that enforces W^X.
> Assuming you don't wish to just disable SE Linux, there are
> two ugly ways around the problem.

This should be fixed in SELinux, or more accurately the SELinux profile.

There is absolutely no other sane option.

Of course, you generally don't need a page to be writable and executable
at the same time, but the overhead of switching can be enormous.

	-hpa
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/