:orphan:

.. title:: CONFIG_EXECUTE_XOR_WRITE

.. kconfig:: CONFIG_EXECUTE_XOR_WRITE

CONFIG_EXECUTE_XOR_WRITE
########################

*Enable W^X for memory partitions*

Type: ``bool``

Help
====

.. code-block:: none

    When enabled, will enforce that a writable page isn't executable
    and vice versa.  This might not be acceptable in all scenarios,
    so this option is given for those unafraid of shooting themselves
    in the foot.

    If unsure, say Y.

Direct dependencies
===================

\ :kconfig:`USERSPACE <CONFIG_USERSPACE>` && \ :kconfig:`ARCH_HAS_EXECUTABLE_PAGE_BIT <CONFIG_ARCH_HAS_EXECUTABLE_PAGE_BIT>`

*(Includes any dependencies from ifs and menus.)*

Default
=======

- y

Kconfig definition
==================



At ``<Zephyr Kernel>/Kconfig:678``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:40``

Menu path: (Top) → General Kernel Options → Security Options

.. code-block:: kconfig

    config EXECUTE_XOR_WRITE
    	bool "Enable W^X for memory partitions"
    	default y
    	depends on USERSPACE && ARCH_HAS_EXECUTABLE_PAGE_BIT
    	help
    	  When enabled, will enforce that a writable page isn't executable
    	  and vice versa.  This might not be acceptable in all scenarios,
    	  so this option is given for those unafraid of shooting themselves
    	  in the foot.
	  
    	  If unsure, say Y.

*(The 'depends on' condition includes propagated dependencies from ifs and menus.)*