]> git.proxmox.com Git - mirror_edk2.git/commit
ArmVirtPkg: make EFI_LOADER_DATA non-executable
authorArd Biesheuvel <ardb@kernel.org>
Tue, 2 Aug 2022 09:48:04 +0000 (11:48 +0200)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Wed, 26 Oct 2022 17:28:39 +0000 (17:28 +0000)
commit2997ae38739756ecba9b0de19e86032ebc689ef9
tree586aceb7aef18c97fc1f6b321c99205ac194a004
parent9e2c88b16ed3444ea9dfffb39a91d6c17071835d
ArmVirtPkg: make EFI_LOADER_DATA non-executable

When the memory protections were implemented and enabled on ArmVirtQemu
5+ years ago, we had to work around the fact that GRUB at the time
expected EFI_LOADER_DATA to be executable, as that is the memory type it
allocates when loading its modules.

This has been fixed in GRUB in August 2017, so by now, we should be able
to tighten this, and remove execute permissions from EFI_LOADER_DATA
allocations.

Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
ArmVirtPkg/ArmVirt.dsc.inc