Page 1 of 1
Paging flags inheritance
Posted: Wed Sep 23, 2020 2:26 pm
by nexos
Hello,
So when I map a PDE with say only the present bit set, does that mean that the whole 2M area is unwriteable, regardless of what is in the PTEs? I have been wondering this for a while.
Thanks,
nexos
Re: Paging flags inheritance
Posted: Wed Sep 23, 2020 2:41 pm
by iansjack
I could tell you, but I think you would learn more if you were to read the Intel manual, which tells you exactly what happens. (I'm not trying to be difficult here, but I strongly believe that aspiring OS programmers need to learn how to use reference documentation.)
Re: Paging flags inheritance
Posted: Wed Sep 23, 2020 4:57 pm
by nexos
It makes sense now. That explains why my ELF loader I made in my last OS mysteriously didn't work when I mapped the program according to the program header's attributes. So is it a good idea to map page tables into PDEs and page directories into PDPTs and PDPTs in PML4Es with R/W and U/S bits set, and to only set the right attributes on the PTE?
Re: Paging flags inheritance
Posted: Wed Sep 23, 2020 6:51 pm
by sj95126
nexos wrote:So is it a good idea to map page tables into PDEs and page directories into PDPTs and PDPTs in PML4Es with R/W and U/S bits set, and to only set the right attributes on the PTE?
There's really no reason to set U/S=1 in the PML4Es that correspond to your kernel regions, even if you set U/S=0 in lower tables. It doesn't gain you anything and if you slip up, it's a possible security hole.
There may be some situations where it's better to use the higher levels of the table to control permissions; for example, if you have a shared region where multiple processes' PDs point to the same PTs, you could give a read-only view to some processes in their PDs and still share the PTs with their R/W=1 entries.
There's really never a single rule to follow everywhere.
Re: Paging flags inheritance
Posted: Wed Sep 23, 2020 7:29 pm
by nexos
sj95126 wrote:It doesn't gain you anything and if you slip up, it's a possible security hole.
I find that hard to believe. It appears to be harmless to me, as long as the last page in translation (the PTE) has the right attributes set. I will follow that method, as it seems to be the most comprehensive.
Re: Paging flags inheritance
Posted: Wed Sep 23, 2020 8:49 pm
by sj95126
nexos wrote:sj95126 wrote:It doesn't gain you anything and if you slip up, it's a possible security hole.
I find that hard to believe. It appears to be harmless to me, as long as the last page in translation (the PTE) has the right attributes set.
If you should have a bug and lose track of which PTs go where, which ones are U/S=1 and which ones are U/S=0, you might open something up. If you simply set a few PML4Es to U/S=0, *once*, you're done.
I stand by my original statement. Unless you have a very good reason, marking kernel regions U/S=1 and relying on sub-regions to protect it is just asking for trouble.