lkml.org 
[lkml]   [2011]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC][PATCH] Randomize kernel base address on boot

* Dan Rosenberg <drosenberg@vsecurity.com> wrote:

> Just to play devil's advocate, how is it easier for a local
> attacker to figure out where kernel internals are if it's been
> relinked vs. randomized at load time, assuming we follow through on
> fixing the info leaks?

Well, 'fixing the info leaks' will obfuscate previously useful files
such as /proc/kallsyms ...

That's one of the advantages of randomization: it allows us to expose
RIPs without them being an instant information leak.

Thanks,

Ingo


\
 
 \ /
  Last update: 2011-05-27 19:19    [W:3.305 / U:0.024 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site