diff options
author | Ingo Molnar <mingo@elte.hu> | 2009-09-02 02:17:56 -0400 |
---|---|---|
committer | Ingo Molnar <mingo@elte.hu> | 2009-09-02 02:17:56 -0400 |
commit | 936e894a976dd3b0f07f1f6f43c17b77b7e6146d (patch) | |
tree | 5ed5c1f6735dcd26550594df23c8f7fe2aa21a15 /security/Kconfig | |
parent | 69575d388603365f2afbf4166df93152df59b165 (diff) | |
parent | 326ba5010a5429a5a528b268b36a5900d4ab0eba (diff) |
Merge commit 'v2.6.31-rc8' into x86/txt
Conflicts:
arch/x86/kernel/reboot.c
security/Kconfig
Merge reason: resolve the conflicts, bump up from rc3 to rc8.
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Diffstat (limited to 'security/Kconfig')
-rw-r--r-- | security/Kconfig | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig index 5721847a7a62..fb363cd81cf6 100644 --- a/security/Kconfig +++ b/security/Kconfig | |||
@@ -143,6 +143,22 @@ config INTEL_TXT | |||
143 | 143 | ||
144 | If you are unsure as to whether this is required, answer N. | 144 | If you are unsure as to whether this is required, answer N. |
145 | 145 | ||
146 | config LSM_MMAP_MIN_ADDR | ||
147 | int "Low address space for LSM to protect from user allocation" | ||
148 | depends on SECURITY && SECURITY_SELINUX | ||
149 | default 65536 | ||
150 | help | ||
151 | This is the portion of low virtual memory which should be protected | ||
152 | from userspace allocation. Keeping a user from writing to low pages | ||
153 | can help reduce the impact of kernel NULL pointer bugs. | ||
154 | |||
155 | For most ia64, ppc64 and x86 users with lots of address space | ||
156 | a value of 65536 is reasonable and should cause no problems. | ||
157 | On arm and other archs it should not be higher than 32768. | ||
158 | Programs which use vm86 functionality or have some need to map | ||
159 | this low address space will need the permission specific to the | ||
160 | systems running LSM. | ||
161 | |||
146 | source security/selinux/Kconfig | 162 | source security/selinux/Kconfig |
147 | source security/smack/Kconfig | 163 | source security/smack/Kconfig |
148 | source security/tomoyo/Kconfig | 164 | source security/tomoyo/Kconfig |