linux-kernel - Re: Make LSM_MMAP_MIN_ADDR default match its help text.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 18 Aug 2009 13:50:54 -0400
From:	Eric Paris <eparis@...hat.com>
To:	Dave Jones <davej@...hat.com>
Cc:	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	James Morris <jmorris@...ei.org>
Subject: Re: Make LSM_MMAP_MIN_ADDR default match its help text.

On Tue, 2009-08-18 at 13:47 -0400, Dave Jones wrote:
> Commit 788084aba2ab7348257597496befcbccabdc98a3 added the LSM_MMAP_MIN_ADDR
> option, whose help text states "For most ia64, ppc64 and x86 users with lots
> of address space a value of 65536 is reasonable and should cause no problems."
> Which implies that it's default setting was typoed.

Acked-by: Eric Paris <eparis@...hat.com>

This can wait or go now.  the tests against this are always a strict >
(not >=) and they are always rounded to PAGE_SIZE.  Thus both have the
same address protections.

-Eric

> Signed-off-by: Dave Jones <davej@...hat.com>
> 
> --- linux-2.6.30.noarch/security/Kconfig~	2009-08-18 13:45:33.000000000 -0400
> +++ linux-2.6.30.noarch/security/Kconfig	2009-08-18 13:45:36.000000000 -0400
> @@ -116,7 +116,7 @@ config SECURITY_ROOTPLUG
>  config LSM_MMAP_MIN_ADDR
>  	int "Low address space for LSM to from user allocation"
>  	depends on SECURITY && SECURITY_SELINUX
> -	default 65535
> +	default 65536
>  	help
>  	  This is the portion of low virtual memory which should be protected
>  	  from userspace allocation.  Keeping a user from writing to low pages


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/