Supervisor Mode Access Prevention

Supervisor Mode Access Prevention (SMAP) is a feature of some CPU implementations such as the Intel Broadwell microarchitecture that allows supervisor mode programs to optionally set user-space memory mappings so that access to those mappings from supervisor mode will cause a trap. This makes it harder for malicious programs to "trick" the kernel into using instructions or data from a user-space program.[1][2]

See also

References

  1. ↑ "Supervisor mode access prevention". lwn.net.
  2. ↑ "Intel® Xeon® Processor D Product Family Technical Overview". Intel.
This article is issued from Wikipedia - version of the 4/1/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.