Page MenuHomeFreeBSD
Files F164152703

D45420.id139255.diff
No OneTemporary
Actions

D45420.id139255.diff
View Options

Index: share/man/man7/mitigations.7
===================================================================
--- share/man/man7/mitigations.7
+++ share/man/man7/mitigations.7
@@ -234,8 +234,20 @@
.\"
.\".Ss Stack Smashing Protection (SSP)
.\"
-.\".Ss Supervisor mode memory protection
-.\"
+.Ss Supervisor mode memory protection
+Certain processors include features that prevent unintended access to memory
+pages not owned by the kernel.
+This is intended to prevent exploitation of kernel bugs from userland.
+.Bl -column -offset indent "Architecture" "Feature" "Access Type Prevented"
+.It Sy Architecture Ta Sy Feature Ta Sy Access Type Prevented
+.It amd64 Ta SMAP Ta Read / Write / Execute
+.It amd64 Ta SMEP Ta Execute
+.It arm64 Ta PAN Ta Read / Write / Execute
+.It arm64 Ta PXN Ta Execute
+.El
+.Pp
+These features are used by the kernel.
+There is no user-facing configuration.
.Ss Hardware vulnerability controls
See
.Xr security 7

File Metadata

Mime Type
text/plain
Expires
Thu, Jul 30, 4:55 AM (16 h, 13 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
35727664
Default Alt Text
D45420.id139255.diff (975 B)

Event Timeline