summaryrefslogtreecommitdiffstats
path: root/security/selinux
diff options
context:
space:
mode:
authorArd Biesheuvel <ard.biesheuvel@linaro.org>2015-11-09 09:55:46 +0100
committerCatalin Marinas <catalin.marinas@arm.com>2015-11-09 14:26:36 +0000
commitfb226c3d7c77b4f99cee675795cc0e70937c56ee (patch)
tree08f88c1b14952e03fdf797f0ec233923463cfa56 /security/selinux
parentb219545e9646e9d4089a74029c82ae59645e12ae (diff)
downloadop-kernel-dev-fb226c3d7c77b4f99cee675795cc0e70937c56ee.zip
op-kernel-dev-fb226c3d7c77b4f99cee675795cc0e70937c56ee.tar.gz
arm64: fix R/O permissions of FDT mapping
The mapping permissions of the FDT are set to 'PAGE_KERNEL | PTE_RDONLY' in an attempt to map the FDT as read-only. However, not only does this break at build time under STRICT_MM_TYPECHECKS (since the two terms are of different types in that case), it also results in both the PTE_WRITE and PTE_RDONLY attributes to be set, which means the region is still writable under ARMv8.1 DBM (and an attempted write will simply clear the PT_RDONLY bit). So instead, define PAGE_KERNEL_RO (which already has an established meaning across architectures) and use that instead. Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
Diffstat (limited to 'security/selinux')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud