Re: Security-What can be done in kernel to disable forever executable memory modificaton

2019-01-12 Thread valdis . kletnieks
On Sat, 12 Jan 2019 16:19:00 +0300, Lev Olshvang said: > The fact that the text segment could be modified is bad news from the > security standpoint. We've known that for at least a decade now. Maybe longer. And we already had this discussion once, about a week ago. > I am not sure whether it

Security-What can be done in kernel to disable forever executable memory modificaton

2019-01-12 Thread Lev Olshvang
Hi All, The fact that the text segment could be modified is bad news from the security standpoint. For example, in order to set a breakpoint GDB should map a text segment with MAP_PRIVATE flag which allows kernel to ignore the dirty bit that MMU sets on this page. Somewhere in the middle