Files
linux/Documentation
Philip Sanderson 5230ff0ccc lguest: example launcher to use guard pages, drop PROT_EXEC, fix limit logic
PROT_EXEC seems to be completely unnecessary (as the lguest binary
never executes there), and will allow it to work with SELinux (and
more importantly, PaX :-) as they can/do forbid writable and
executable mappings.

Also, map PROT_NONE guard pages at start and end of guest memory for extra
paranoia.

I changed the length check to addr + size > guest_limit because >= is wrong
(addr of 0, size of getpagesize() with a guest_limit of getpagesize() would
false positive).

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2011-01-20 21:37:29 +10:30
..
2010-02-24 13:51:32 +01:00
2008-10-16 11:21:30 -07:00
2011-01-13 20:00:02 +00:00
2011-01-06 18:10:09 +09:00
2011-01-13 08:03:21 -08:00
2010-07-11 22:17:45 +02:00
2011-01-13 08:03:18 -08:00
2011-01-13 08:03:25 -08:00
2010-04-08 11:34:34 +02:00
2008-12-03 16:09:53 -07:00
2009-10-15 07:25:20 -06:00
2009-07-01 22:36:22 +02:00
2009-04-27 12:00:27 -07:00
2009-04-27 12:00:27 -07:00
2008-11-12 17:17:17 -08:00
2010-03-10 17:09:33 -05:00
2010-07-19 10:56:54 +02:00
2010-03-16 11:47:56 +01:00
2010-08-02 15:35:10 +10:00