2.2.20-rc2: o fixed mm/memory.c SMP bugs o fixed fs/binfmt_aout.c compilation warnings 2.2.20-rc1: o fixed fs/binfmt_aout.c compilation error o knox.c renamed to chknox.c o added sysctl and EFL/a.out flag to control trampoline call emulation o code clean-ups o README updated 2.2.20-pre6: o added sysctl interface 2.2.20-pre5: o FIX: serious bugs related to _PAGE_ACCESSED pte flag for code segment pages o FIX: copy_exec_pages() didn't mark code segment pages as old o VM_EXEC flag is tested in handle_pte_fault() instead of do_exec_page() o +x flag (PF_DISABLEKNOX) no longer modifies CS selector o executable-only pages (--X) can not be read o test.c: added new test to check --X (above) protection o test.c: renamed to demo.c o knox.c: +x flag displayed at 5th columnt o knox.c: more complex flag operators 2.2.20-pre4: o Update to 2.2.20 kernel and Openwall-2.2.20ow1 2.2.19-pre3: o FIX: page table cache flushing was broken o FIX: invalid use of offset member of struct page o FIX: unlock_kernel() calls fixed in mm/memory.c o added +m flag o removed unused get_modrm() function o test.c: execl() changed to execlp() 2.2.19-pre2: o FIX: copy-on-write bug of non-executable pages that were executable o FIX: trampoline emulation works since now o FIX: +h and +s flags do not require +w flag on binaries any more o FIX: shared segments have RW- by default, +w works on them o fork system call: page table copying optimized o struct page made smaller o do_exec_page slighty optimized o page exec fault messages cleaned up o TASK_SIZE definition cleaned up o noexectest.c tool cleaned up, added new tests, renamed to test.c o CONFIG_SECURE_* options renamed to CONFIG_KNOX_* 2.2.19-pre1: o Initial release