]> git.baikalelectronics.ru Git - kernel.git/commit
x86/mm: Unexport set_memory_ro() and set_memory_rw()
authorDaniel Borkmann <daniel@iogearbox.net>
Fri, 27 Feb 2015 14:55:40 +0000 (15:55 +0100)
committerIngo Molnar <mingo@kernel.org>
Sat, 28 Feb 2015 09:41:59 +0000 (10:41 +0100)
commit155ffa3f28bae1a8bcc17bf263e3e6d71511160e
tree2a8f3e5e4faa36f90ce6588bf8157851bf831ded
parentda8e96d86b966bd87dcaccba78fe7fed575bcf36
x86/mm: Unexport set_memory_ro() and set_memory_rw()

This effectively unexports set_memory_ro() and set_memory_rw()
functions, and thus reverts:

  a6f8642908f3 ("x86: export set_memory_ro and set_memory_rw").

They have been introduced for debugging purposes in e1000e, but
no module user is in mainline kernel (anymore?) and we
explicitly do not want modules to use these functions, as they
i.e. protect eBPF (interpreted & JIT'ed) images from malicious
modifications or bugs.

Outside of eBPF scope, I believe also other set_memory_*()
functions should be unexported on x86 for modules.

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Alexei Starovoitov <ast@plumgrid.com>
Cc: Arjan van de Ven <arjan@linux.intel.com>
Cc: Borislav Petkov <bp@suse.de>
Cc: Bruce Allan <bruce.w.allan@intel.com>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Jesse Brandeburg <jesse.brandeburg@intel.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: davem@davemloft.net
Link: http://lkml.kernel.org/r/a064393a0a5d319eebde5c761cfd743132d4f213.1425040940.git.daniel@iogearbox.net
Signed-off-by: Ingo Molnar <mingo@kernel.org>
arch/x86/mm/pageattr.c