security: use mmap_min_addr indepedently of security models

This patch removes the dependency of mmap_min_addr on CONFIG_SECURITY.
It also sets a default mmap_min_addr of 4096.

mmapping of addresses below 4096 will only be possible for processes
with CAP_SYS_RAWIO.

Signed-off-by: Christoph Lameter <[email protected]>
Acked-by: Eric Paris <[email protected]>
Looks-ok-by: Linus Torvalds <[email protected]>
Signed-off-by: James Morris <[email protected]>
This commit is contained in:
Christoph Lameter 2009-06-03 16:04:31 -04:00 • committed by James Morris
commit e0a94c2a63
7 changed files with 25 additions and 28 deletions

View file

@ -87,6 +87,9 @@ int sysctl_overcommit_ratio = 50; /* default is 50% */
int sysctl_max_map_count __read_mostly = DEFAULT_MAX_MAP_COUNT;
struct percpu_counter vm_committed_as;
/* amount of vm to protect from userspace access */
unsigned long mmap_min_addr = CONFIG_DEFAULT_MMAP_MIN_ADDR;
/*
* Check that a process has enough memory to allocate a new virtual
* mapping. 0 means there is enough memory for the allocation to