Re: [edk2] [PATCH 3/5] ArmPkg/ArmMmuLib AARCH64: implement support for EFI_MEMORY_RP permissions

2019-01-14 Thread Leif Lindholm
On Mon, Jan 14, 2019 at 03:59:08PM +0100, Ard Biesheuvel wrote: > On Mon, 14 Jan 2019 at 15:29, Leif Lindholm wrote: > > > > On Mon, Jan 07, 2019 at 08:15:02AM +0100, Ard Biesheuvel wrote: > > > Wire up the access flag (AF) page table attribute to the EFI_MEMORY_RP > > > permission attribute, so t

Re: [edk2] [PATCH 3/5] ArmPkg/ArmMmuLib AARCH64: implement support for EFI_MEMORY_RP permissions

2019-01-14 Thread Ard Biesheuvel
On Mon, 14 Jan 2019 at 15:29, Leif Lindholm wrote: > > On Mon, Jan 07, 2019 at 08:15:02AM +0100, Ard Biesheuvel wrote: > > Wire up the access flag (AF) page table attribute to the EFI_MEMORY_RP > > permission attribute, so that attempts to read from such a region will > > trigger an access flag fa

Re: [edk2] [PATCH 3/5] ArmPkg/ArmMmuLib AARCH64: implement support for EFI_MEMORY_RP permissions

2019-01-14 Thread Leif Lindholm
On Mon, Jan 07, 2019 at 08:15:02AM +0100, Ard Biesheuvel wrote: > Wire up the access flag (AF) page table attribute to the EFI_MEMORY_RP > permission attribute, so that attempts to read from such a region will > trigger an access flag fault. > > Note that this is a stronger notion than just read p

[edk2] [PATCH 3/5] ArmPkg/ArmMmuLib AARCH64: implement support for EFI_MEMORY_RP permissions

2019-01-06 Thread Ard Biesheuvel
Wire up the access flag (AF) page table attribute to the EFI_MEMORY_RP permission attribute, so that attempts to read from such a region will trigger an access flag fault. Note that this is a stronger notion than just read protection, since it now implies that any write or execute attempt is trapp