git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7cd9414) | patch
VM/Security: add security hook to do_brk
authorEric Paris <eparis@redhat.com>
Tue, 4 Dec 2007 16:06:55 +0000 (11:06 -0500)
committerJames Morris <jmorris@namei.org>
Wed, 5 Dec 2007 13:25:30 +0000 (00:25 +1100)
commit5a211a5deabcafdc764817d5b4510c767d317ddc
treed330ce692f43c1b02c84ff81284e6191d567e02ftree | snapshot
parent7cd94146cd504016315608e297219f9fb7b1413bcommit | diff
VM/Security: add security hook to do_brk

Given a specifically crafted binary do_brk() can be used to get low
pages available in userspace virtually memory and can thus be used to
circumvent the mmap_min_addr low memory protection.  Add security checks
in do_brk().

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Alan Cox <alan@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
mm/mmap.c diff | blob | history
Full containers within linux kernel