You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Paris ed03218951 security: Protection for exploiting null dereference using mmap ... Add a new security check on mmap operations to see if the user is attempting to mmap to low area of the address space. The amount of space protected is indicated by the new proc tunable /proc/sys/vm/mmap_min_addr and defaults to 0, preserving existing behavior. This patch uses a new SELinux security class "memprotect." Policy already contains a number of allow rules like a_t self:process * (unconfined_t being one of them) which mean that putting this check in the process class (its best current fit) would make it useless as all user processes, which we also want to protect against, would be allowed. By taking the memprotect name of the new class it will also make it possible for us to move some of the other memory protect permissions out of 'process' and into the new class next time we bump the policy version number (which I also think is a good future idea) Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Chris Wright <chrisw@sous-sol.org> Signed-off-by: Eric Paris <eparis@redhat.com> Signed-off-by: James Morris <jmorris@namei.org>		18 years ago
..
Kconfig	sh64: generic quicklist support.	18 years ago
Makefile	Quicklists for page table pages	18 years ago
allocpercpu.c	…
backing-dev.c	[PATCH] nfs: fix congestion control	18 years ago
bootmem.c	…
bounce.c	block: blk_max_pfn is somtimes wrong	18 years ago
fadvise.c	…
filemap.c	sendfile: kill generic_file_sendfile()	18 years ago
filemap.h	…
filemap_xip.c	xip sendfile removal	18 years ago
fremap.c	…
highmem.c	[PATCH] i386: PARAVIRT: add kmap_atomic_pte for mapping highpte pages	18 years ago
hugetlb.c	Rework ptep_set_access_flags and fix sun4c	18 years ago
internal.h	Make page->private usable in compound pages	18 years ago
madvise.c	Detach sched.h from mm.h	18 years ago
memory.c	Rework ptep_set_access_flags and fix sun4c	18 years ago
memory_hotplug.c	memory hotplug: fix unnecessary calling of init_currenty_empty_zone()	18 years ago
mempolicy.c	[PATCH] Page migration: Fix vma flag checking	18 years ago
mempool.c	…
migrate.c	page migration: fix NR_FILE_PAGES accounting	18 years ago
mincore.c	…
mlock.c	Detach sched.h from mm.h	18 years ago
mmap.c	security: Protection for exploiting null dereference using mmap	18 years ago
mmzone.c	…
mprotect.c	…
mremap.c	security: Protection for exploiting null dereference using mmap	18 years ago
msync.c	Detach sched.h from mm.h	18 years ago
nommu.c	security: Protection for exploiting null dereference using mmap	18 years ago
oom_kill.c	oom: fix constraint deadlock	18 years ago
page-writeback.c	consolidate generic_writepages and mpage_writepages	18 years ago
page_alloc.c	mm: Fix memory/cpu hotplug section mismatch and oops.	18 years ago
page_io.c	…
pdflush.c	…
prio_tree.c	…
quicklist.c	Quicklists for page table pages	18 years ago
readahead.c	readahead: code cleanup	18 years ago
rmap.c	mm: kill validate_anon_vma to avoid mapcount BUG	18 years ago
shmem.c	shmem: convert to using splice instead of sendfile()	18 years ago
shmem_acl.c	…
slab.c	Fix slab redzone alignment	18 years ago
slob.c	Remove SLAB_CTOR_CONSTRUCTOR	18 years ago
slub.c	slub: remove useless EXPORT_SYMBOL	18 years ago
sparse.c	Move three functions that are only needed for CONFIG_MEMORY_HOTPLUG	18 years ago
swap.c	Add suspend-related notifications for CPU hotplug	18 years ago
swap_state.c	…
swapfile.c	mm: make read_cache_page synchronous	18 years ago
thrash.c	Bug in mm/thrash.c function grab_swap_token()	18 years ago
tiny-shmem.c	[PATCH] mm/{,tiny-}shmem.c cleanups	18 years ago
truncate.c	fs: convert core functions to zero_user_page	18 years ago
util.c	…
vmalloc.c	Make __vunmap static	18 years ago
vmscan.c	Add suspend-related notifications for CPU hotplug	18 years ago
vmstat.c	mm: fixup /proc/vmstat output	18 years ago