Re: [PATCH 09/25] powerpc: ability to create execute-disabled pkeys

On Tue, Oct 24, 2017 at 10:06:18AM +0530, Aneesh Kumar K.V wrote:

Ram Pai [off-list ref] writes:

quoted

powerpc has hardware support to disable execute on a pkey.
This patch enables the ability to create execute-disabled
keys.

Can you summarize here how this works?  Access to IAMR is
privileged so how will keys framework work with IAMR? 

-aneesh

right. IAMR will have to programmed through a system call.
I have introduced a sys_pkey_modify()  which takes a key value
and the permission that it wants to enable/disable on that key.
This syscall is powerpc specific only for now, since no other
arch's need it.

The patch is at http://patchwork.ozlabs.org/patch/817961/

-- 
Ram Pai