Messages in this thread | | | Date | Fri, 5 Jan 2018 20:05:32 +0100 | From | Borislav Petkov <> | Subject | Re: [RFC] selftests/x86: Add test_vsyscall |
| |
On Fri, Jan 05, 2018 at 10:47:15AM -0800, Andy Lutomirski wrote: > The remaining problem is that, for certain classes of userspace bugs, > an attacker can take advantage of the vsyscall page's existence at a > fixed address to cause mischief. So opting out of having it be there > could be helpful to mitigate attacks.
I understand that but how do you shoo people off the vsyscall page? You need to tell old binaries about the per-process disablement and new binaries to move to vdso.
Hmmm, add big fat warnings to vsyscall_64.c?
-- Regards/Gruss, Boris.
Good mailing practices for 400: avoid top-posting and trim the reply.
| |