From a211ca52cd8de55708139678afafc7afcd4eedea Mon Sep 17 00:00:00 2001 From: Mark Johnston Date: Thu, 17 Oct 2019 21:39:23 +0000 Subject: [PATCH] Add an ldscript for amd64 kernel modules. Use it to pad the text and read-only data sections to a 4KB boundary. This will be used to enforce strict memory protections for some sections of loadable kernel modules. Reviewed by: kib MFC after: 2 weeks Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D21970 --- sys/conf/ldscript.kmod.amd64 | 48 ++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 sys/conf/ldscript.kmod.amd64 diff --git a/sys/conf/ldscript.kmod.amd64 b/sys/conf/ldscript.kmod.amd64 new file mode 100644 index 000000000000..9bd9e816f843 --- /dev/null +++ b/sys/conf/ldscript.kmod.amd64 @@ -0,0 +1,48 @@ +/*- + * SPDX-License-Identifier: BSD-2-Clause + * + * Copyright (c) 2019 Mark Johnston + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + * $FreeBSD$ + */ + + /* + * Coalesce executable and read-only sections, and pad to page alignment so + * that memory protections can be strictly enforced. + */ + +SECTIONS +{ + .text : + { + *(.text .text.*) + . = ALIGN(CONSTANT(COMMONPAGESIZE)); + } + + .rodata : + { + *(.rodata .rodata.*) + . = ALIGN(CONSTANT(COMMONPAGESIZE)); + } +}