From e2e4200c29eee2ee789d35e0aef47f4bbb594ecf Mon Sep 17 00:00:00 2001 From: gjb Date: Sun, 26 Jul 2015 17:57:53 +0000 Subject: [PATCH] Further refine the PAE_TABLES entry, based on feedback from alc. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation git-svn-id: https://svn.freebsd.org/base/releng/10.2@285895 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f --- .../doc/en_US.ISO8859-1/relnotes/article.xml | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.xml b/release/doc/en_US.ISO8859-1/relnotes/article.xml index c2df07f45..fb94bbb7e 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.xml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.xml @@ -353,13 +353,16 @@ The PAE_TABLES kernel configuration option has been added for &os;/&arch.i386;, which instructs &man.pmap.9; - to use PAE format for page tables with - 32-bit physical addresses. Unlike the PAE - option, PAE_TABLES preserves kernel binary - interface (KBI) compatibility with - non-PAE kernels, allowing - non-PAE kernel modules and drivers to work - with a PAE_TABLES-enabled kernel. + to use PAE format for page tables while + maintaining a 32-bit physical address size elsewhere in the + kernel. The use of this option can enhance application-level + security by enabling the creation of no execute + mappings on modern &arch.i386; processors. Unlike the + PAE option, PAE_TABLES + preserves kernel binary interface (KBI) + compatibility with non-PAE kernels, + allowing non-PAE kernel modules and drivers + to work with a PAE_TABLES-enabled kernel. Additionally, system limits are tuned for 4GB maximum RAM, avoiding kernel virtual address space (KVA) exhaustion. -- 2.42.0