lkml.org 
[lkml]   [2010]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
    Hello,

    On 11/04/2010 03:33 PM, Marcus Meissner wrote:
    > I mean the kernel could hide it from uname, but lsb_release,
    > /etc/redhat-release, /etc/SuSE-release etc still exist and then you
    > can still use the fixed address list table inside your exploit. But an
    > exploits needs to have such a list, making it harder to write.

    I do believe that making things more difficult to exploit helps. Many
    people seem to think it only gives false sense of security tho.

    > I also briefly thought about kernel ASLR, but my knowledge of the kernel
    > loading is too limited whether this is even possible or at all useful.

    We already have relocatable kernel for kdump and IIRC it doesn't add
    runtime overhead, so putting the kernel at random address shouldn't be
    too difficult. Not sure how useful that would be tho.

    Thanks.

    --
    tejun


    \
     
     \ /
      Last update: 2010-11-04 15:41    [W:0.029 / U:0.412 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site