Starting with kernel 5.13 RiscV will get XIP where parts of the kernel run from non volatile memory like flash. In theory you could make parts of the kernel really read only either from the hardware side by storing on a write protected chip or a bit limited write protection via the hypervisor when run in a VM. Will this be useful to thwart any memory related attacks? And can this be extended to other binaries?



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.