TechPanelGM/kernel_xiaomi_sm8250
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

selinux: Relocate ss_initialized and selinux_enforcing to separate 4k

Browse Source 
We need to relocate ss_initialized and selinux_enforcing to a separate
4k page to enable EL2 Hypervisor to monitor changes to this variable
using ARM stage 2 MMU. We will avoid getting page faults from
un-related data as the MMU granularity is configured to 4k.

Change-Id: I870b50edf1a5d3e3b89d249a2eaac6ab6f3838ee
Signed-off-by: Amareswar Reddy Valasa <avalasa@codeaurora.org>
This commit is contained in:
Amareswar Reddy Valasa
2019-11-06 16:29:39 +05:30
parent a0e0de0156
commit 50240fa841
3 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
arch/arm64/kernel/vmlinux.lds.S
View File

@@ -68,6 +68,10 @@ jiffies = jiffies_64;
#define TRAMP_TEXT #define TRAMP_TEXT
#endif #endif
#define RTIC_BSS \
. = ALIGN(PAGE_SIZE); \
KEEP(*(.bss.rtic)); \
. = ALIGN(PAGE_SIZE); \
/* /*
* The size of the PE/COFF section that covers the kernel image, which * The size of the PE/COFF section that covers the kernel image, which
* runs from stext to _edata, must be a round multiple of the PE/COFF * runs from stext to _edata, must be a round multiple of the PE/COFF
@@ -239,6 +243,10 @@ SECTIONS
STABS_DEBUG STABS_DEBUG
HEAD_SYMBOLS HEAD_SYMBOLS
.bss : { /* bss segment */
RTIC_BSS
}
} }
/* /*

2
include/linux/init.h
View File

@@ -314,6 +314,8 @@ void __init parse_early_options(char *cmdline);
/* Data marked not to be saved by software suspend */ /* Data marked not to be saved by software suspend */
#define __nosavedata __section(.data..nosave) #define __nosavedata __section(.data..nosave)
#define __rticdata __attribute__((section(".bss.rtic")))
#ifdef MODULE #ifdef MODULE
#define __exit_p(x) x #define __exit_p(x) x
#else #else

2
security/selinux/hooks.c
View File

@@ -100,7 +100,7 @@
#include "audit.h" #include "audit.h"
#include "avc_ss.h" #include "avc_ss.h"
struct selinux_state selinux_state; struct selinux_state selinux_state __rticdata;
/* SECMARK reference count */ /* SECMARK reference count */
static atomic_t selinux_secmark_refcount = ATOMIC_INIT(0); static atomic_t selinux_secmark_refcount = ATOMIC_INIT(0);