linux: make use of mseal(2)

Open cgzones opened this issue 1 year ago • 3 comments

Instead of protecting the global read-only data structure after startup via the read-only flag, which can be reverted, use the in Linux 6.10 introduced irreversible syscall mseal(2).

Jul 24 '24 15:07 cgzones

I've been running this for about a week now without issue.

Aug 19 '24 15:08 SkewedZeppelin

Will get to this eventually, it's just very low priority due to low impact.

Oct 16 '24 21:10 thestinger

Kindly ping

Sep 21 '25 10:09 cgzones