Files
systemd/src/basic
Topi Miettinen 7a114ed4b3 execute: use prctl(PR_SET_MDWE) for MemoryDenyWriteExecute=yes
On some ARM platforms, the dynamic linker could use PROT_BTI memory protection
flag with `mprotect(..., PROT_BTI | PROT_EXEC)` to enable additional memory
protection for executable pages. But `MemoryDenyWriteExecute=yes` blocks this
with seccomp filter denying all `mprotect(..., x | PROT_EXEC)`.

Newly preferred method is to use prctl(PR_SET_MDWE) on supported kernels. Then
in-kernel implementation can allow PROT_BTI as necessary, without weakening
MDWE. In-kernel version may also be extended to more sophisticated protections
in the future.
2023-03-13 18:44:36 +00:00
..
2022-12-21 01:50:33 +09:00
2023-02-09 15:32:33 +00:00
2022-11-08 13:41:14 +01:00
2022-11-08 18:21:10 +01:00
2023-02-20 12:43:31 +01:00
2023-02-20 12:43:31 +01:00
2022-11-09 11:14:10 +01:00
2022-11-09 11:14:10 +01:00
2023-01-08 16:31:16 +01:00
2023-03-13 13:04:08 +01:00
2023-03-13 13:04:08 +01:00
2022-08-02 02:43:38 +09:00
2023-02-24 14:11:31 +01:00
2022-07-26 23:41:48 +09:00
2023-03-03 22:52:09 +09:00
2022-11-09 11:14:10 +01:00
2022-12-15 09:57:39 +00:00
2022-12-15 09:57:39 +00:00
2023-03-10 09:47:39 +01:00
2023-03-10 09:47:39 +01:00
2023-02-01 11:38:35 +01:00
2022-12-23 23:26:26 +01:00
2022-12-23 23:26:26 +01:00
2022-11-08 18:21:10 +01:00
2022-12-13 16:03:37 +01:00
2022-09-13 08:13:27 +02:00
2022-03-18 09:42:38 +01:00
2022-06-01 03:12:33 +09:00
2023-02-14 12:51:38 +01:00