]> git.proxmox.com Git - mirror_edk2.git/commit - ArmVirtPkg/ArmVirt.dsc.inc
ArmVirtPkg AARCH64: enable NX memory protection for all platforms
authorArd Biesheuvel <ard.biesheuvel@linaro.org>
Mon, 27 Feb 2017 14:10:59 +0000 (14:10 +0000)
committerArd Biesheuvel <ard.biesheuvel@linaro.org>
Wed, 1 Mar 2017 18:35:40 +0000 (18:35 +0000)
commit1acd7c54a72418918d7aaa859884e72bd4933473
treef7edc10edaf10bb891ad724747b93256044a811f
parentdd320e633a8a80c93c9c43535d3bec7606c45b12
ArmVirtPkg AARCH64: enable NX memory protection for all platforms

This sets the recently introduced PCD PcdDxeNxMemoryProtectionPolicy to
a value that protects all memory regions except code regions against
inadvertent execution.

Note that this does not [yet] protect EfiLoaderData regions, due to
compatibility issues with shim and GRUB.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Tested-by: Laszlo Ersek <lersek@redhat.com>
ArmVirtPkg/ArmVirt.dsc.inc