diff options
| -rw-r--r-- | security/Kconfig | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/security/Kconfig b/security/Kconfig index 5dfc206748cf..49b51f964897 100644 --- a/security/Kconfig +++ b/security/Kconfig | |||
| @@ -113,10 +113,12 @@ config SECURITY_DEFAULT_MMAP_MIN_ADDR | |||
| 113 | from userspace allocation. Keeping a user from writing to low pages | 113 | from userspace allocation. Keeping a user from writing to low pages |
| 114 | can help reduce the impact of kernel NULL pointer bugs. | 114 | can help reduce the impact of kernel NULL pointer bugs. |
| 115 | 115 | ||
| 116 | For most users with lots of address space a value of 65536 is | 116 | For most ia64, ppc64 and x86 users with lots of address space |
| 117 | reasonable and should cause no problems. Programs which use vm86 | 117 | a value of 65536 is reasonable and should cause no problems. |
| 118 | functionality would either need additional permissions from either | 118 | On arm and other archs it should not be higher than 32768. |
| 119 | the LSM or the capabilities module or have this protection disabled. | 119 | Programs which use vm86 functionality would either need additional |
| 120 | permissions from either the LSM or the capabilities module or have | ||
| 121 | this protection disabled. | ||
| 120 | 122 | ||
| 121 | This value can be changed after boot using the | 123 | This value can be changed after boot using the |
| 122 | /proc/sys/vm/mmap_min_addr tunable. | 124 | /proc/sys/vm/mmap_min_addr tunable. |