Commit 530b099d authored by Colin Cross's avatar Colin Cross Committed by Catalin Marinas

security: select correct default LSM_MMAP_MIN_ADDR on arm on arm64

Binaries compiled for arm may run on arm64 if CONFIG_COMPAT is
selected.  Set LSM_MMAP_MIN_ADDR to 32768 if ARM64 && COMPAT to
prevent selinux failures launching 32-bit static executables that
are mapped at 0x8000.
Signed-off-by: default avatarColin Cross <ccross@android.com>
Acked-by: default avatarWill Deacon <will.deacon@arm.com>
Acked-by: default avatarEric Paris <eparis@redhat.com>
Acked-by: default avatarJames Morris <james.l.morris@oracle.com>
Signed-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
parent 6290b53d
...@@ -103,7 +103,7 @@ config INTEL_TXT ...@@ -103,7 +103,7 @@ config INTEL_TXT
config LSM_MMAP_MIN_ADDR config LSM_MMAP_MIN_ADDR
int "Low address space for LSM to protect from user allocation" int "Low address space for LSM to protect from user allocation"
depends on SECURITY && SECURITY_SELINUX depends on SECURITY && SECURITY_SELINUX
default 32768 if ARM default 32768 if ARM || (ARM64 && COMPAT)
default 65536 default 65536
help help
This is the portion of low virtual memory which should be protected This is the portion of low virtual memory which should be protected
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment