Messages in this thread |  | | Subject | Re: [RFC 04/10] x86/mm: Only flush indirect branches when switching into non dumpable process | Date | Sun, 21 Jan 2018 22:20:13 +0000 | From | "Woodhouse, David" <> |
| |
On Sun, 2018-01-21 at 17:21 +0100, Ingo Molnar wrote: > > Because putting something like this into an ELF flag raises the question of who is > allowed to set the flag - does a user-compiled binary count? If yes then it would > be a trivial thing for local exploits to set the flag and turn off the barrier.
You can only allow *yourself* to be exploited that way. The flag says, "I'm OK, you don't need to protect me". [unhandled content-type:application/x-pkcs7-signature] |  |