feat: kernel W^X (per-section perms, firmware unmapped, stack guard, boot check), halt on kernel faults, region W^X across processes

2026-10-27 00:13:00 +01:00
parent bafc18a5f8
commit 55758ae5b2
12 changed files with 285 additions and 17 deletions
--- a/crates/kernel/src/syscall/mod.rs
+++ b/crates/kernel/src/syscall/mod.rs
@@ -38,7 +38,9 @@ pub fn error_code(error: &KernelError) -> ErrorCode {
        InvalidSlot(_) | RevokedCapability(_) | NoSuchObject | InvalidEndpoint(_) => {
            ErrorCode::InvalidCap
        }
-        PermissionDenied { .. } | ProcessCreateDenied => ErrorCode::PermissionDenied,
+        PermissionDenied { .. } | ProcessCreateDenied | WritableAndExecutable => {
+            ErrorCode::PermissionDenied
+        }
        WrongObject => ErrorCode::WrongObject,
        NoFreeSlot => ErrorCode::NoFreeSlot,
        OutOfMemory => ErrorCode::OutOfMemory,