Mate Kukri 94649c0267 nx: Set page permissions for loaded modules ...

For NX we need to set write and executable permissions on the sections
of GRUB modules when we load them. All allocatable sections are marked
readable. In addition:
  - SHF_WRITE sections are marked as writable,
  - and SHF_EXECINSTR sections are marked as executable.

Where relevant for the platform the tramp and GOT areas are marked non-writable.

Signed-off-by: Peter Jones <pjones@redhat.com>
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Signed-off-by: Jan Setje-Eilers <jan.setjeeilers@oracle.com>
Signed-off-by: Mate Kukri <mate.kukri@canonical.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2024-10-11 14:43:03 +02:00

..

boot

A workaround for clang problem assembling startup_raw.S

2019-04-08 15:22:10 +10:00

bus

build: Fix -Werror=array-bounds array subscript 0 is outside array bounds

2022-04-20 18:27:52 +02:00

commands

i386/msr: Extract and improve MSR support detection code

2024-10-10 13:09:06 +02:00

disk

disk/cryptodisk: Fix translatable message

2024-06-20 15:51:52 +02:00

efiemu

types: Split aligned and packed guids

2023-11-08 05:04:24 +01:00

font

font: Try opening fonts from the bundled memdisk

2023-05-16 18:51:12 +02:00

fs

fs/erofs: Replace 64-bit modulo with bitwise operations

2024-09-05 17:08:38 +02:00

gdb

misc: Spelling fixes

2023-01-19 17:39:04 +01:00

gettext

gfxmenu: Remove trailing whitespaces

2022-03-14 15:45:59 +01:00

gfxmenu

gfxmenu/view: Resolve false grub_errno disrupting boot process

2024-04-11 15:48:25 +02:00

hello

* grub-core/commands/gptsync.c: Fix typographic quoting.

2012-03-03 13:05:08 +01:00

hook

* grub-core/hook/datehook.c (grub_read_hook_datetime): Small stylistic

2011-11-11 21:03:49 +01:00

io

io/gzio: Properly init a table

2024-06-06 16:55:15 +02:00

kern

nx: Set page permissions for loaded modules

2024-10-11 14:43:03 +02:00

lib

i386/memory: Rename PAGE_SHIFT to GRUB_PAGE_SHIFT

2024-10-10 13:10:10 +02:00

loader

i386/memory: Rename PAGE_SIZE to GRUB_PAGE_SIZE and make it global

2024-10-10 13:11:23 +02:00

mmap

efi: Drop all uses of efi_call_XX() wrappers

2023-05-25 16:48:00 +02:00

net

net/drivers/efi/efinet: Skip virtual VLAN devices during card enumeration

2024-10-10 12:38:47 +02:00

normal

efi/console: Properly clear leftover artifacts from the screen

2024-10-10 12:36:56 +02:00

osdep

osdep/devmapper/getroot: Unmark 2 strings for translation

2024-06-20 19:14:41 +02:00

partmap

gpt: Add compile time asserts for guid and gpt_partentry sizes

2023-11-08 05:05:06 +01:00

parttool

types: Make bool generally available

2022-11-14 17:17:21 +01:00

script

script: Remove trailing whitespaces

2022-03-14 15:59:45 +01:00

term

efi/console: Properly clear leftover artifacts from the screen

2024-10-10 12:36:56 +02:00

tests

tests: Remove trailing whitespaces

2022-03-14 16:00:27 +01:00

video

video/efi_gop: Require shadow if PixelBltOnly

2023-08-31 17:21:40 +02:00

gdb_grub.in

gdb: Add extra early initialization symbols for i386-pc

2023-03-14 16:07:54 +01:00

gdb_helper.py.in

gdb: Modify gdb prompt when running gdb_grub script

2023-03-14 16:07:54 +01:00

genemuinit.sh

use MODULE_FILES for genemuinit* instead of MOD_FILES

2014-01-18 23:15:40 +04:00

genemuinitheader.sh

use MODULE_FILES for genemuinit* instead of MOD_FILES

2014-01-18 23:15:40 +04:00

genmod.sh.in

modules: Strip .llvm_addrsig sections and similar

2024-10-10 13:18:00 +02:00

genmoddep.awk

build: Track explicit module dependencies in Makefile.core.def

2024-05-09 15:04:54 +02:00

gensyminfo.sh.in

Fix shebang for termux.

2017-05-03 12:49:31 +02:00

gensymlist.sh

config: Where present, ensure config-util.h precedes config.h

2022-03-21 18:47:16 +01:00

gentrigtables.c

* grub-core/gentrigtables.c: Make tables const.

2013-03-01 11:15:09 +01:00

Makefile.am

build: Track explicit module dependencies in Makefile.core.def

2024-05-09 15:04:54 +02:00

Makefile.core.def

gentpl: Put boot/mips/startup_raw.S into beginning of the image

2024-09-05 17:25:27 +02:00

modinfo.sh.in

Fix shebang for termux.

2017-05-03 12:49:31 +02:00