mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-30 11:41:38 -04:00
security: use mmap_min_addr indepedently of security models
This patch removes the dependency of mmap_min_addr on CONFIG_SECURITY. It also sets a default mmap_min_addr of 4096. mmapping of addresses below 4096 will only be possible for processes with CAP_SYS_RAWIO. Signed-off-by: Christoph Lameter <[email protected]> Acked-by: Eric Paris <[email protected]> Looks-ok-by: Linus Torvalds <[email protected]> Signed-off-by: James Morris <[email protected]>
This commit is contained in:
parent
7d2948b124
commit
e0a94c2a63
7 changed files with 25 additions and 28 deletions
|
|
@ -87,6 +87,9 @@ int sysctl_overcommit_ratio = 50; /* default is 50% */
|
|||
int sysctl_max_map_count __read_mostly = DEFAULT_MAX_MAP_COUNT;
|
||||
struct percpu_counter vm_committed_as;
|
||||
|
||||
/* amount of vm to protect from userspace access */
|
||||
unsigned long mmap_min_addr = CONFIG_DEFAULT_MMAP_MIN_ADDR;
|
||||
|
||||
/*
|
||||
* Check that a process has enough memory to allocate a new virtual
|
||||
* mapping. 0 means there is enough memory for the allocation to
|
||||
|
|
|
|||
Loading…
Reference in a new issue