Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 58068960 authored by Paul Gortmaker's avatar Paul Gortmaker Committed by James Morris
Browse files

security: select correct default LSM_MMAP_MIN_ADDR on ARM. 



The default for this is universally set to 64k, but the help says:

   For most ia64, ppc64 and x86 users with lots of address space
   a value of 65536 is reasonable and should cause no problems.
   On arm and other archs it should not be higher than 32768.

The text is right, in that we are seeing selinux-enabled ARM targets
that fail to launch /sbin/init because selinux blocks a memory map.
So select the right value if we know we are building ARM.

Signed-off-by: default avatarPaul Gortmaker <paul.gortmaker@windriver.com>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent 4aab1e89

security/Kconfig

+1 −0
Original line number Diff line number Diff line
@@ -167,6 +167,7 @@ config INTEL_TXT 
config LSM_MMAP_MIN_ADDR

	int "Low address space for LSM to protect from user allocation"

	depends on SECURITY && SECURITY_SELINUX

	default 32768 if ARM

	default 65536

	help

	  This is the portion of low virtual memory which should be protected