Messages in this thread | | | Date | Fri, 27 May 2011 10:06:42 -0700 | From | "H. Peter Anvin" <> | Subject | Re: [RFC][PATCH] Randomize kernel base address on boot |
| |
On 05/27/2011 10:00 AM, Ingo Molnar wrote: > > The problem with your relinking solution is that a local attacker can > easily figure out where the kernel is. So this does not protect > against the more common break-in scenario. >
There is another issue with it: it doesn't actually solve the real problem other than suspend/resume, which is that the relocation agent needs to understand what the memory space looks like at the time of boot.
I think something else we will need for this to be possible is initramfs decoding directly from highmem, since the hack we're currently using to deal with an initramfs/initrd located partly in highmem will break.
-hpa
| |