Re: [v6 PATCH 00/21] x86: Enable User-Mode Instruction Prevention
Andy Lutomirski <[email protected]> Fri, 31 Mar 2017 19:18:18 -0700
| Newsgroups | org.kernel.vger.linux-msdos,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <CALCETrX-Q3JS=2EYFWq2oNpnd8bTW-CO2B0fqpLREMW8YZLhQQ@mail.gmail.com> |
On Fri, Mar 31, 2017 at 2:26 PM, Stas Sergeev <[email protected]> wrote: > 31.03.2017 17:11, Alexandre Julliard пишет: >> >> In fact it would be nice to be able to make sidt/sgdt/etc. segfault >> too. I know a new syscall is a pain, > > Maybe arch_prctl() then? I still like my idea of a generic mechanism to turn off backwards-compatibility things. After all, hardened programs should turn off UMIP fixups entirely. They should also turn off vsyscall emulation entirely, and I see no reason that these mechanisms should be different. --Andy