On 8/16/06, Paul Mackerras <paulus@samba.org> wrote:
Gabriel Paubert writes:
> BTW, there is one way to make pages non executable: mark > them as guarded, but it will have a significant cost in > terms of performance. Indeed. I guess we could do that as a config option for machines that really want maximum security at the expense of performance, but I don't think all users would want that.
On the other hand, if you want to squeeze some performance out of the chip, turn off coherency. (probably not for SMP) I've done it before, with a non-Linux OS. It does help. Other tricks are to map userspace via BATs and, on the 7410 at least, to map half or all of the outermost cache memory as a special block of high-speed memory.