Messages in this thread | | | Date | Thu, 17 Jul 2014 11:48:55 -0700 | Subject | Re: [PATCH v4 5/5] x86,kaslr: Use MSR_KVM_GET_RNG_SEED for KASLR if available | From | Kees Cook <> |
| |
On Thu, Jul 17, 2014 at 11:22 AM, Andy Lutomirski <luto@amacapital.net> wrote: > It's considerably better than any of the alternatives on KVM. > > Rather than reinventing all of the cpu feature query code, this fixes > native_cpuid to work in PIC objects. > > I haven't combined it with boot/cpuflags.c's cpuid implementation: > including asm/processor.h from boot/cpuflags.c results in a flood of > unrelated errors, and fixing it might be messy. > > Signed-off-by: Andy Lutomirski <luto@amacapital.net>
This will be very nice to have under kvm!
Reviewed-by: Kees Cook <keescook@chromium.org>
Thanks,
-Kees
-- Kees Cook Chrome OS Security
| |