Re: [PATCH 1/6] pkey.7: New page with overview of Memory Protection Keys

On 10/12/2016 01:41 AM, Florian Weimer wrote:

On 06/08/2016 07:34 PM, Dave Hansen wrote:

quoted

+To use this feature, the processor must support it, and Linux
+must contain support for the feature on a given processor.
+As of early 2016 only future Intel x86 processors are supported,
+and this hardware supports 16 protection keys in each process.
+However, pkey 0 is used as the default key, so a maximum of 15
+are available for actual application use.

How can we reserve pkeys for use in system libraries?

We are currently in need of a centralized mechanism to track which keys
are allocated/free.  My plan is to go add one to glibc.  I'll add the
documentation to the manpages when I post this functionality.