diff options
| author | Roger Pau Monné <royger@FreeBSD.org> | 2018-09-13 07:15:02 +0000 |
|---|---|---|
| committer | Roger Pau Monné <royger@FreeBSD.org> | 2018-09-13 07:15:02 +0000 |
| commit | 5ff6c7f3638411bf7e82dedd57f0f7cba57bc77d (patch) | |
| tree | dcad59ab0b534bf2fc8d76e04d4735a557d1ce0f /lib/libpam/pam.d/Makefile | |
| parent | a74cdf4e747667a8d7db4dcdc57cf97db822444d (diff) | |
| download | src-5ff6c7f3638411bf7e82dedd57f0f7cba57bc77d.tar.gz src-5ff6c7f3638411bf7e82dedd57f0f7cba57bc77d.zip | |
xen: temporary disable SMAP when forwarding hypercalls from user-space
The Xen page-table walker used to resolve the virtual addresses in the
hypercalls will refuse to access user-space pages when SMAP is enabled
unless the AC flag in EFLAGS is set (just like normal hardware with
SMAP support would do).
Since privcmd allows forwarding hypercalls (and buffers) from
user-space into Xen make sure SMAP is temporary disabled for the
duration of the hypercall from user-space.
Approved by: re (gjb)
Sponsored by: Citrix Systems R&D
Notes
Notes:
svn path=/head/; revision=338632
Diffstat (limited to 'lib/libpam/pam.d/Makefile')
0 files changed, 0 insertions, 0 deletions