CONFIG_MSEAL_SYSTEM_MAPPINGS: mseal system mappings

General informations

The Linux kernel configuration item CONFIG_MSEAL_SYSTEM_MAPPINGS:

• prompt: mseal system mappings
• type: bool
• depends on: ( CONFIG_64BIT ) && ( CONFIG_ARCH_SUPPORTS_MSEAL_SYSTEM_MAPPINGS ) && (! CONFIG_CHECKPOINT_RESTORE )
• defined in security/Kconfig
• found in Linux kernels: 6.15-rc+HEAD

Help text

Apply mseal on system mappings. The system mappings includes vdso, vvar, vvar_vclock, vectors (arm compat-mode), sigpage (arm compat-mode), uprobes.

A 64-bit kernel is required for the memory sealing feature. No specific hardware features from the CPU are needed.

WARNING: This feature breaks programs which rely on relocating or unmapping system mappings. Known broken software at the time of writing includes CHECKPOINT_RESTORE, UML, gVisor, rr. Therefore this config can't be enabled universally.

For complete descriptions of memory sealing, please see Documentation/userspace-api/mseal.rst

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: