Re: [v6 PATCH 00/21] x86: Enable User-Mode Instruction Prevention
Andy Lutomirski <[email protected]>
| Newsgroups | gmane.linux.msdos.general,gmane.linux.kernel,gmane.comp.emulators.wine.devel |
|---|---|
| Message-ID | <CALCETrX-Q3JS=2EYFWq2oNpnd8bTW-CO2B0fqpLREMW8YZLhQQ@mail.gmail.com> |
On Fri, Mar 31, 2017 at 2:26 PM, Stas Sergeev <[email protected]> wrote: > 31.03.2017 17:11, Alexandre Julliard пишет: >> >> In fact it would be nice to be able to make sidt/sgdt/etc. segfault >> too. I know a new syscall is a pain, > > Maybe arch_prctl() then? I still like my idea of a generic mechanism to turn off backwards-compatibility things. After all, hardened programs should turn off UMIP fixups entirely. They should also turn off vsyscall emulation entirely, and I see no reason that these mechanisms should be different. --Andy -- To unsubscribe from this list: send the line "unsubscribe linux-msdos" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html