From: Jack Vogel Date: Fri, 16 Dec 2016 18:55:45 +0000 (-0800) Subject: Add the CONFIG_DEBUG_SET_MODULE_RONX option to OL6 X-Git-Tag: v4.1.12-92~17^2~3 X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=8b20a1b37d9dcf29a36dcf959f5c601f7a49f426;p=users%2Fjedix%2Flinux-maple.git Add the CONFIG_DEBUG_SET_MODULE_RONX option to OL6 Set the CONFIG_DEBUG_SET_MODULE_RONX option in the OL6 configuration, this changes the page permissions of a loadable module, code and RO data are set to RX, leaving off the write permission for the page, this causes modify access to be trapped and provides enhanced security. Orabug: 24910950 Signed-off-by: Jack Vogel --- diff --git a/uek-rpm/ol6-nano/config-x86_64 b/uek-rpm/ol6-nano/config-x86_64 index 40326163f60d6..4ed6feb74b561 100644 --- a/uek-rpm/ol6-nano/config-x86_64 +++ b/uek-rpm/ol6-nano/config-x86_64 @@ -4430,7 +4430,7 @@ CONFIG_EARLY_PRINTK_DBGP=y CONFIG_EARLY_PRINTK_EFI=y # CONFIG_X86_PTDUMP is not set # CONFIG_DEBUG_RODATA is not set -# CONFIG_DEBUG_SET_MODULE_RONX is not set +CONFIG_DEBUG_SET_MODULE_RONX=y CONFIG_DEBUG_NX_TEST=m CONFIG_DOUBLEFAULT=y # CONFIG_DEBUG_TLBFLUSH is not set diff --git a/uek-rpm/ol6-nano/config-x86_64-debug b/uek-rpm/ol6-nano/config-x86_64-debug index 01162590536d2..f94ea2409469b 100644 --- a/uek-rpm/ol6-nano/config-x86_64-debug +++ b/uek-rpm/ol6-nano/config-x86_64-debug @@ -4646,7 +4646,7 @@ CONFIG_EARLY_PRINTK_EFI=y CONFIG_X86_PTDUMP=y # CONFIG_EFI_PGT_DUMP is not set # CONFIG_DEBUG_RODATA is not set -# CONFIG_DEBUG_SET_MODULE_RONX is not set +CONFIG_DEBUG_SET_MODULE_RONX=y CONFIG_DEBUG_NX_TEST=m CONFIG_DOUBLEFAULT=y # CONFIG_DEBUG_TLBFLUSH is not set diff --git a/uek-rpm/ol6/config-x86_64 b/uek-rpm/ol6/config-x86_64 index a16417eab61b3..288f45f74ebb2 100644 --- a/uek-rpm/ol6/config-x86_64 +++ b/uek-rpm/ol6/config-x86_64 @@ -5977,7 +5977,7 @@ CONFIG_EARLY_PRINTK_DBGP=y CONFIG_EARLY_PRINTK_EFI=y # CONFIG_X86_PTDUMP is not set # CONFIG_DEBUG_RODATA is not set -# CONFIG_DEBUG_SET_MODULE_RONX is not set +CONFIG_DEBUG_SET_MODULE_RONX=y CONFIG_DEBUG_NX_TEST=m CONFIG_DOUBLEFAULT=y # CONFIG_DEBUG_TLBFLUSH is not set diff --git a/uek-rpm/ol6/config-x86_64-debug b/uek-rpm/ol6/config-x86_64-debug index c7001af237df3..096481d376385 100644 --- a/uek-rpm/ol6/config-x86_64-debug +++ b/uek-rpm/ol6/config-x86_64-debug @@ -5998,7 +5998,7 @@ CONFIG_EARLY_PRINTK_EFI=y CONFIG_X86_PTDUMP=y # CONFIG_EFI_PGT_DUMP is not set # CONFIG_DEBUG_RODATA is not set -# CONFIG_DEBUG_SET_MODULE_RONX is not set +CONFIG_DEBUG_SET_MODULE_RONX=y CONFIG_DEBUG_NX_TEST=m CONFIG_DOUBLEFAULT=y # CONFIG_DEBUG_TLBFLUSH is not set