Reporting Issues
Bug 3329 - DxeCore: No support for granular PE section permissions
Summary: DxeCore: No support for granular PE section permissions
Status: UNCONFIRMED
Alias: None
Product: EDK2
Classification: Unclassified
Component: Code (show other bugs)
Version: Current
Hardware: All All
: Lowest normal
Assignee: Marvin Häuser
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-04-12 11:26 UTC by Marvin Häuser
Modified: 2021-12-08 03:05 UTC (History)
6 users (show)

See Also:
EDK II Code First industry standard specifications: ---
Branch URL:
Release(s) the issue is observed: EDK II Master
The OS the target platform is running: ---
Package: MdeModulePkg
Release(s) the issues must be fixed: EDK II Master
Tianocore documents:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marvin Häuser 2021-04-12 11:26:22 UTC 
DxeCore currently protects protectable (i.e. such that are aligned and have only W^X sections) PE images with one of two permission modes, RX or RW[1]. Some images contain .rodata or .rdata sections however, which are read-only data. To enhance security and debugging, more granular permissions such as R should be supported.

[1] https://github.com/tianocore/edk2/blob/2072c22a0d63c780b0cc6377f6d4ffb116ad6144/MdeModulePkg/Core/Dxe/Misc/MemoryProtection.c#L263-L280
Comment 1 gaoliming 2021-04-13 21:54:17 UTC 
Marvin, you can continue to provide the proposal.
Comment 2 gaoliming 2021-12-07 21:50:53 UTC 
Marvin: have you any update?
Comment 3 Marvin Häuser 2021-12-08 03:05:34 UTC 
Well, from my side this would be implicitly resolved by the new PE loader (I will not contribute to anything related to the current solution), and one of its most basic prerequisite patches has been stuck since August despite positive review with no reaction to pings: https://edk2.groups.io/g/devel/message/83931 
For multiple reasons (including but not limited to this), I won’t pursue any progress on this for at least the next couple of months.