[lkml]   [2011]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [RFC][PATCH] Randomize kernel base address on boot

* Linus Torvalds <> wrote:

> If you compile your own kernel version, you're already home free,
> and load-time randomization is pointless.

Most successful exploits work in two steps: first a local exploit
(weak password with a user, stupid script escaping bug, or a buffer
overflow somewhere), then a local kernel exploit to gain root and
kernel access. (for a rootkit and what not)

Straight remote root exploits are pretty rare - and per system
relinking only protects against that.

The problem with your relinking solution is that a local attacker can
easily figure out where the kernel is. So this does not protect
against the more common break-in scenario.

Kernel image randomization makes this last step really
indeterministic and thus dangerous to attackers.



 \ /
  Last update: 2011-05-27 19:03    [W:0.220 / U:1.632 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site