tree d330ce692f43c1b02c84ff81284e6191d567e02f
parent 7cd94146cd504016315608e297219f9fb7b1413b
author Eric Paris <eparis@redhat.com> 1196784415 -0500
committer James Morris <jmorris@namei.org> 1196861130 +1100

VM/Security: add security hook to do_brk

Given a specifically crafted binary do_brk() can be used to get low
pages available in userspace virtually memory and can thus be used to
circumvent the mmap_min_addr low memory protection.  Add security checks
in do_brk().

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Alan Cox <alan@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>