CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2012/10/30 21:30:22
Modified files:
sys/arch/amd64/amd64: copy.S cpu.c identcpu.c trap.c
sys/arch/i386/i386: cpu.c locore.s machdep.c trap.c
Log message:
Add support for Intel's Supervisor Mode Access Prevention (SMAP) feature.
When enabled SMAP will generate page faults on the kernel attempting
to read/write user data pages unless an override flag is set.
Instructions that modify the flag are patched into copyin/copyout and
friends on boot if SMAP is enabled.
Those with access to hardware with SMAP can contact me for a test case.
joint work with deraadt@
ok miod@ deraadt@
