CVSROOT: /cvs Module name: src Changes by: [email protected] 2014/10/18 11:28:34
Modified files:
sys/arch/amd64/amd64: pmap.c
Log message:
Make sure the direct map isn't executable on hardware that allows us to do so.
Enforcing W^X in the kernel like this mitigates at least some ret2dir attacks.
ok mlarkin@, deraadt@
