[grsec] grsecurity breaks reiser4 compilation
pageexec at freemail.hu
pageexec at freemail.hu
Fri Oct 1 11:09:02 EDT 2010
On 1 Oct 2010 at 3:27, Kerin Millar wrote:
> > the main question to answer is why reiser4 needs to modify this structure
> > at runtime in the first place as it is a no-go in vanilla linux as well,
> > it's just not enforced at the compiler level (but try to get it past Al
> > Viro and you'll see ;). so where's this patch/code exactly and why does
> > it do this?
>
> There are known good (so to speak) patches here:
>
> http://kernel.sysresccd.org/sysresccd-1.6.1/
thanks, from what i can tell based on a quick glance at the affected
code, there's no reason for reiser4 to make runtime copies of these
ops structures (there's export and dentry ops involved too), so someone
should rewrite the code to directly use the ops structures (which should
be defined as const as well while at it).
More information about the grsecurity
mailing list