Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Jeff Xu
gt; > > > > > > > On Wed, Jan 31, 2024 at 05:50:24PM +, jef...@chromium.org wrote: > > > > > > [PATCH v8 2/4] mseal: add mseal syscall > > > > > [...] > > > > > > +/* > > > > > > + * The PROT

Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Theo de Raadt
Jeff Xu wrote: > On Thu, Feb 1, 2024 at 7:54 PM Theo de Raadt wrote: > > > > Jeff Xu wrote: > > > > > On Thu, Feb 1, 2024 at 3:11 PM Eric Biggers wrote: > > > > > > > > On Wed, Jan 31, 2024 at 05:50:24PM +0000, jef...@chromium.org wr

Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Jeff Xu
On Thu, Feb 1, 2024 at 7:54 PM Theo de Raadt wrote: > > Jeff Xu wrote: > > > On Thu, Feb 1, 2024 at 3:11 PM Eric Biggers wrote: > > > > > > On Wed, Jan 31, 2024 at 05:50:24PM +, jef...@chromium.org wrote: > > >

Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Theo de Raadt
Jeff Xu wrote: > On Thu, Feb 1, 2024 at 3:11 PM Eric Biggers wrote: > > > > On Wed, Jan 31, 2024 at 05:50:24PM +, jef...@chromium.org wrote: > > > [PATCH v8 2/4] mseal: add mseal syscall > > [...] > > > +/* > > > + * The PROT_SEAL def

Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Jeff Xu
On Thu, Feb 1, 2024 at 3:11 PM Eric Biggers wrote: > > On Wed, Jan 31, 2024 at 05:50:24PM +, jef...@chromium.org wrote: > > [PATCH v8 2/4] mseal: add mseal syscall > [...] > > +/* > > + * The PROT_SEAL defines memory sealing in the prot argument of mmap(). >

Re: [PATCH v8 2/4] mseal: add mseal syscall

2024-02-01 Thread Eric Biggers
On Wed, Jan 31, 2024 at 05:50:24PM +, jef...@chromium.org wrote: > [PATCH v8 2/4] mseal: add mseal syscall [...] > +/* > + * The PROT_SEAL defines memory sealing in the prot argument of mmap(). > + */ > +#define PROT_SEAL0x0400 /* _BITUL(26) */ > + > /* 0x01

[PATCH v8 2/4] mseal: add mseal syscall

2024-01-31 Thread jeffxu
From: Jeff Xu The new mseal() is an syscall on 64 bit CPU, and with following signature: int mseal(void addr, size_t len, unsigned long flags) addr/len: memory range. flags: reserved. mseal() blocks following operations for the given memory range. 1> Unmapping, moving to another location, and