]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Set the userspace execute never bit on kernel mappings.
authorandrew <andrew@FreeBSD.org>
Wed, 30 Oct 2019 17:32:35 +0000 (17:32 +0000)
committerandrew <andrew@FreeBSD.org>
Wed, 30 Oct 2019 17:32:35 +0000 (17:32 +0000)
commitadeaebe505b91aea5b84dbcb50e891045263485b
treec125b751a20a4829fad11dbd45e73c297919c0a5
parent803085e0df375d822ef5672d5a716b1ef3ed8fac
Set the userspace execute never bit on kernel mappings.

Arm64 allows us to create execute only mappings. To make sure userspace is
unable to accidentally execute kernel code set the user execute never
bit in the kernel page tables.

MFC after: 1 week
Sponsored by: DARPA, AFRL
sys/arm64/arm64/locore.S
sys/arm64/arm64/pmap.c