Page MenuHomeFreeBSD

mitigations.7: mention supervisor mode memory access protections
ClosedPublic

Authored by emaste on May 31 2024, 2:15 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, May 28, 3:55 AM
Unknown Object (File)
Thu, May 14, 5:29 AM
Unknown Object (File)
Wed, May 13, 9:40 AM
Unknown Object (File)
Sat, May 9, 9:38 PM
Unknown Object (File)
Fri, May 8, 8:26 PM
Unknown Object (File)
May 7 2026, 2:22 PM
Unknown Object (File)
May 7 2026, 1:48 PM
Unknown Object (File)
May 6 2026, 7:27 AM
Subscribers

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

emaste created this revision.
This revision is now accepted and ready to land.May 31 2024, 2:20 PM
olce added inline comments.
share/man/man7/mitigations.7
249
share/man/man7/mitigations.7
239

small addition staged in my tree

emaste added a reviewer: kib.

Describe the two different features in more detail

This revision now requires review to proceed.May 31 2024, 2:50 PM

It is also worth mentioning that SMAP/PAN provide very effective NULL pointer dereference protection in kernel, and make mapping a page at address zero safe.

share/man/man7/mitigations.7
239

'not owned by the kernel' is a weird formulation, I even have to stop digesting it. The right way to express it is probably 'pages accessible to userspace/non-privileged code'.

andrew added inline comments.
share/man/man7/mitigations.7
248

I think PAN only prevents read/write as it's just for data accesses.

This revision is now accepted and ready to land.May 31 2024, 3:20 PM