diff options
author | gjb <gjb@FreeBSD.org> | 2015-07-26 17:57:35 +0000 |
---|---|---|
committer | gjb <gjb@FreeBSD.org> | 2015-07-26 17:57:35 +0000 |
commit | d8cc27b9d06534836220413043b897e6983cf9c6 (patch) | |
tree | 06523dc1da24dfa4f1bbfc6db569d223d300b812 /release | |
parent | dc79e09c5ba932c401aa38f36d81432c54923446 (diff) | |
download | FreeBSD-src-d8cc27b9d06534836220413043b897e6983cf9c6.zip FreeBSD-src-d8cc27b9d06534836220413043b897e6983cf9c6.tar.gz |
Further refine the PAE_TABLES entry, based on feedback from
alc.
Sponsored by: The FreeBSD Foundation
Diffstat (limited to 'release')
-rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.xml | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.xml b/release/doc/en_US.ISO8859-1/relnotes/article.xml index c2df07f..fb94bbb 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.xml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.xml @@ -353,13 +353,16 @@ <para revision="282065" contrib="sponsor" sponsor="&ff;">The <literal>PAE_TABLES</literal> kernel configuration option has been added for &os;/&arch.i386;, which instructs &man.pmap.9; - to use <acronym>PAE</acronym> format for page tables with - 32-bit physical addresses. Unlike the <literal>PAE</literal> - option, <literal>PAE_TABLES</literal> preserves kernel binary - interface (<acronym>KBI</acronym>) compatibility with - non-<literal>PAE</literal> kernels, allowing - non-<literal>PAE</literal> kernel modules and drivers to work - with a <literal>PAE_TABLES</literal>-enabled kernel. + to use <acronym>PAE</acronym> format for page tables while + maintaining a 32-bit physical address size elsewhere in the + kernel. The use of this option can enhance application-level + security by enabling the creation of <quote>no execute</quote> + mappings on modern &arch.i386; processors. Unlike the + <literal>PAE</literal> option, <literal>PAE_TABLES</literal> + preserves kernel binary interface (<acronym>KBI</acronym>) + compatibility with non-<literal>PAE</literal> kernels, + allowing non-<literal>PAE</literal> kernel modules and drivers + to work with a <literal>PAE_TABLES</literal>-enabled kernel. Additionally, system limits are tuned for 4GB maximum <acronym>RAM</acronym>, avoiding kernel virtual address space (<acronym>KVA</acronym>) exhaustion.</para> |