x86/boot: Split off PE/COFF .data section
authorArd Biesheuvel <ardb@kernel.org>
Fri, 15 Sep 2023 17:16:31 +0000 (17:16 +0000)
committerIngo Molnar <mingo@kernel.org>
Sun, 17 Sep 2023 17:48:43 +0000 (19:48 +0200)
commit34951f3c28bdf6481d949a20413b2ce7693687b2
tree050c70f36c998cb00d0402d62fbac955443b07a8
parentfa5750521e0a4efbc1af05223da9c4bbd6c21c83
x86/boot: Split off PE/COFF .data section

Describe the code and data of the decompressor binary using separate
.text and .data PE/COFF sections, so that we will be able to map them
using restricted permissions once we increase the section and file
alignment sufficiently. This avoids the need for memory mappings that
are writable and executable at the same time, which is something that
is best avoided for security reasons.

Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Link: https://lore.kernel.org/r/20230915171623.655440-17-ardb@google.com
arch/x86/boot/Makefile
arch/x86/boot/header.S