lkml.org 
[lkml]   [2018]   [Jan]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [RFC] selftests/x86: Add test_vsyscall
On Fri, Jan 5, 2018 at 4:33 AM, Borislav Petkov <bp@alien8.de> wrote:
> On Thu, Jan 04, 2018 at 09:38:37PM -0800, Andy Lutomirski wrote:
>> Also, I want to add vsyscall=emulate_noread that makes the vsyscall
>> page be --x. And I want to add a per-process option to turn off
>> vsyscalls.
>
> What for?
>
> It sounds like a bunch of work for something which is deprecated
> anyway...
>

emulate_noread would avoid one exploit technique that Kees saw
somewhere. And per-process disablement would let a system remain
compatible with old binaries without reducing security for newer
binaries.

\
 
 \ /
  Last update: 2018-01-05 18:53    [W:0.124 / U:0.276 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site