| commit | 5a211a5deabcafdc764817d5b4510c767d317ddc | [log] [tgz] |
|---|---|---|
| author | Eric Paris <eparis@redhat.com> | Tue Dec 04 11:06:55 2007 -0500 |
| committer | James Morris <jmorris@namei.org> | Thu Dec 06 00:25:30 2007 +1100 |
| tree | d330ce692f43c1b02c84ff81284e6191d567e02f | |
| parent | 7cd94146cd504016315608e297219f9fb7b1413b [diff] |
VM/Security: add security hook to do_brk Given a specifically crafted binary do_brk() can be used to get low pages available in userspace virtually memory and can thus be used to circumvent the mmap_min_addr low memory protection. Add security checks in do_brk(). Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Alan Cox <alan@redhat.com> Signed-off-by: James Morris <jmorris@namei.org>