linux/Documentation/lguest
Philip Sanderson 5230ff0ccc lguest: example launcher to use guard pages, drop PROT_EXEC, fix limit logic
PROT_EXEC seems to be completely unnecessary (as the lguest binary
never executes there), and will allow it to work with SELinux (and
more importantly, PaX :-) as they can/do forbid writable and
executable mappings.

Also, map PROT_NONE guard pages at start and end of guest memory for extra
paranoia.

I changed the length check to addr + size > guest_limit because >= is wrong
(addr of 0, size of getpagesize() with a guest_limit of getpagesize() would
false positive).

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2011-01-20 21:37:29 +10:30
..
.gitignore lguest: tell git to ignore Documentation/lguest/lguest 2009-04-19 23:14:02 +09:30
extract lguest: documentation I: Preparation 2007-07-26 11:35:16 -07:00
lguest.c lguest: example launcher to use guard pages, drop PROT_EXEC, fix limit logic 2011-01-20 21:37:29 +10:30
lguest.txt Docs/Kconfig: Update: osdl.org -> linuxfoundation.org 2010-11-15 23:50:13 +01:00
Makefile lguest: clean up warnings in demonstration launcher. 2010-08-27 08:39:51 +09:30