Re: [PATCH v23 28/28] mm: Introduce PROT_SHSTK for shadow stack

2021-03-22 Thread Kirill A. Shutemov
On Tue, Mar 16, 2021 at 08:10:54AM -0700, Yu-cheng Yu wrote: > There are three possible options to create a shadow stack allocation API: > an arch_prctl, a new syscall, or adding PROT_SHSTK to mmap()/mprotect(). > Each has its advantages and compromises. > > An arch_prctl() is the least

[PATCH v23 28/28] mm: Introduce PROT_SHSTK for shadow stack

2021-03-16 Thread Yu-cheng Yu
There are three possible options to create a shadow stack allocation API: an arch_prctl, a new syscall, or adding PROT_SHSTK to mmap()/mprotect(). Each has its advantages and compromises. An arch_prctl() is the least intrusive. However, the existing x86 arch_prctl() takes only two parameters.