On Thu, Aug 25, 2016 at 12:49:45AM +0200, Mark Kettenis wrote:
> So enabling full hardware-enforced W^X is perhaps a bit to much at
> this moment. But enabling the bit that enforces that the kernel
> cannot execute pages that are writable by userland should be fine.
> The diff does this on all ARM
So enabling full hardware-enforced W^X is perhaps a bit to much at
this moment. But enabling the bit that enforces that the kernel
cannot execute pages that are writable by userland should be fine.
The diff does this on all ARMv7 processors that include the
Virtualization Extensions, which is what