Lines Matching +full:non +full:- +full:default

1 .. SPDX-License-Identifier: GPL-2.0
4 Introduction of non-executable mfd
17 However, in a secure-by-default system, such as ChromeOS, (where all
31  - Let memfd_create() set X bit at creation time.
32  - Let memfd be sealed for modifying X bit when NX is set.
33  - Add a new pid namespace sysctl: vm.memfd_noexec to help applications in
34    migrating and enforcing non-executable MFD.
60  - 0: MEMFD_NOEXEC_SCOPE_EXEC
64  - 1: MEMFD_NOEXEC_SCOPE_NOEXEC_SEAL
68  - 2: MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED
73 vm.memfd_noexec=1 means the old software will create non-executable memfd
74 by default while new software can create executable memfd by setting
84 [2] https://bugs.chromium.org/p/chromium/issues/list?q=type%3Dbug-security%20memfd%20escalation&can…