Andreas Kling af3d3c5c4a Kernel: Enforce W^X more strictly (like PaX MPROTECT) ...

This patch adds enforcement of two new rules:

- Memory that was previously writable cannot become executable
- Memory that was previously executable cannot become writable

Unfortunately we have to make an exception for text relocations in the
dynamic loader. Since those necessitate writing into a private copy
of library code, we allow programs to transition from RW to RX under
very specific conditions. See the implementation of sys$mprotect()'s
should_make_executable_exception_for_dynamic_loader() for details.

2021-01-29 14:52:27 +01:00

22 KiB

Raw Blame History

View Raw