FilesExpand file tree

 encore-32

/

min_addr.c

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

49 lines (41 loc) · 1.25 KB

 encore-32

/

min_addr.c

Copy path

Top

File metadata and controls

• Code
• Blame

49 lines (41 loc) · 1.25 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

#include <linux/init.h>

#include <linux/mm.h>

#include <linux/security.h>

#include <linux/sysctl.h>

/* amount of vm to protect from userspace access by both DAC and the LSM*/

unsigned long mmap_min_addr;

/* amount of vm to protect from userspace using CAP_SYS_RAWIO (DAC) */

unsigned long dac_mmap_min_addr = CONFIG_DEFAULT_MMAP_MIN_ADDR;

/* amount of vm to protect from userspace using the LSM = CONFIG_LSM_MMAP_MIN_ADDR */

/*

* Update mmap_min_addr = max(dac_mmap_min_addr, CONFIG_LSM_MMAP_MIN_ADDR)

*/

static void update_mmap_min_addr(void)

{

#ifdef CONFIG_LSM_MMAP_MIN_ADDR

if (dac_mmap_min_addr > CONFIG_LSM_MMAP_MIN_ADDR)

mmap_min_addr = dac_mmap_min_addr;

else

mmap_min_addr = CONFIG_LSM_MMAP_MIN_ADDR;

#else

mmap_min_addr = dac_mmap_min_addr;

#endif

}

/*

* sysctl handler which just sets dac_mmap_min_addr = the new value and then

* calls update_mmap_min_addr() so non MAP_FIXED hints get rounded properly

*/

int mmap_min_addr_handler(struct ctl_table *table, int write,

void __user *buffer, size_t *lenp, loff_t *ppos)

{

int ret;

ret = proc_doulongvec_minmax(table, write, buffer, lenp, ppos);

update_mmap_min_addr();

return ret;

}

int __init init_mmap_min_addr(void)

{

update_mmap_min_addr();

return 0;

}

pure_initcall(init_mmap_min_addr);