shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-09 12:17:12 +09:00
Code Issues Packages Projects Releases Wiki Activity

FROMLIST: MIPS: Add noexec=on|off kernel parameter

Browse Source 
Add a new kernel parameter to override the default behavior related to
the decision whether to indicate stack as non-executable or executable
(regardless of PT_GNU_STACK entry or CPU RIXI support) in function
mips_elf_read_implies_exec().

Allowed values:

noexec=on:	force indicating non-exec stack & heap
noexec=off:	force indicating executable stack & heap

If this parameter is omitted, kernel behavior remains the same as it
was before this patch is applied.

This functionality is convenient during debugging and is especially
useful for Android development where indication of non-executable
stack is required.

NOTE: Using noexec=on on a system without CPU XI support is not
recommended since there is no actual HW support that provide
non-executable stack and heap. Use only for debugging purposes and
not in a production environment.

Signed-off-by: Miodrag Dinic <miodrag.dinic@mips.com>
Signed-off-by: Aleksandar Markovic <aleksandar.markovic@mips.com>
(cherry picked from: https://patchwork.linux-mips.org/patch/18218/)
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
This commit is contained in:
Miodrag Dinic
2018-01-09 12:57:16 +01:00
committed by Greg Kroah-Hartman
parent 5bf8bba0f1
commit d4d732cfa4
2 changed files with 67 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
Documentation/kernel-parameters.txt
View File

@@ -2470,6 +2470,25 @@ bytes respectively. Such letter suffixes can also be entirely omitted.
noexec=on: enable non-executable mappings (default)
noexec=off: disable non-executable mappings
noexec [MIPS]
Force indicating stack and heap as non-executable or
executable regardless of PT_GNU_STACK entry or CPU XI
(execute inhibit) support. Valid valuess are: on, off.
noexec=on: force indicating non-executable
stack and heap
noexec=off: force indicating executable
stack and heap
If this parameter is omitted, stack and heap will be
indicated non-executable or executable as they are
actually set up, which depends on PT_GNU_STACK entry
and possibly other factors (for instance, CPU XI
support).
NOTE: Using noexec=on on a system without CPU XI
support is not recommended since there is no actual
HW support that provide non-executable stack/heap.
Use only for debugging purposes and not in a
production environment.
nosmap [X86]
Disable SMAP (Supervisor Mode Access Prevention)
even if it is supported by processor.

48
arch/mips/kernel/elf.c
View File

@@ -330,8 +330,56 @@ void mips_set_personality_nan(struct arch_elf_state *state)
}
}
static int noexec = EXSTACK_DEFAULT;
/*
* kernel parameter: noexec=on|off
*
* Force indicating stack and heap as non-executable or
* executable regardless of PT_GNU_STACK entry or CPU XI
* (execute inhibit) support. Valid valuess are: on, off.
*
* noexec=on: force indicating non-executable
* stack and heap
* noexec=off: force indicating executable
* stack and heap
*
* If this parameter is omitted, stack and heap will be
* indicated non-executable or executable as they are
* actually set up, which depends on PT_GNU_STACK entry
* and possibly other factors (for instance, CPU XI
* support).
*
* NOTE: Using noexec=on on a system without CPU XI
* support is not recommended since there is no actual
* HW support that provide non-executable stack/heap.
* Use only for debugging purposes and not in a
* production environment.
*/
static int __init noexec_setup(char *str)
{
if (!strcmp(str, "on"))
noexec = EXSTACK_DISABLE_X;
else if (!strcmp(str, "off"))
noexec = EXSTACK_ENABLE_X;
else
pr_err("Malformed noexec format! noexec=on|off\n");
return 1;
}
__setup("noexec=", noexec_setup);
int mips_elf_read_implies_exec(void *elf_ex, int exstack)
{
switch (noexec) {
case EXSTACK_DISABLE_X:
return 0;
case EXSTACK_ENABLE_X:
return 1;
default:
break;
}
if (exstack != EXSTACK_DISABLE_X) {
/* The binary doesn't request a non-executable stack */
return 1;