| Subject | Re: [RFC][PATCH] Randomize kernel base address on boot | From | Valdis.Kletnieks@vt ... | Date | Thu, 26 May 2011 16:16:05 -0400 |
| |
On Thu, 26 May 2011 16:01:21 EDT, Vivek Goyal said:
> Also randomization of kernel load address at run time will probably have > some issues with crashkernel=X@Y address syntax. So far user knew what > address first kernel is booting from and user could speicy where to > reserve memory. Now it might happen that user specified some memory > to reserve and kernel decided to occupy that space resulting in failed > memory reservation for crash kernel.
That is however fixable - the randomizer just needs to make sure it doesn't overlay the crashkernel= space, and the crashkernel needs to be started with a 'norandomize' parameter. If your threat model includes attacks on the crashkernel that randomizing will help with, you got bigger problems. ;)
[unhandled content-type:application/pgp-signature] |