lkml.org 
[lkml]   [2011]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [RFC][PATCH] Randomize kernel base address on boot
From
Date
On Fri, 2011-05-27 at 19:00 +0200, Ingo Molnar wrote:
> * Linus Torvalds <torvalds@linux-foundation.org> wrote:
>
> > If you compile your own kernel version, you're already home free,
> > and load-time randomization is pointless.

> The problem with your relinking solution is that a local attacker can
> easily figure out where the kernel is. So this does not protect
> against the more common break-in scenario.
>
> Kernel image randomization makes this last step really
> indeterministic and thus dangerous to attackers.
>

Just to play devil's advocate, how is it easier for a local attacker to
figure out where kernel internals are if it's been relinked vs.
randomized at load time, assuming we follow through on fixing the info
leaks?

It seems to me that the only functional difference is that subsequent
reboots will yield the same memory layout, which is a real drawback
worth considering.

-Dan

> Thanks,
>
> Ingo




\
 
 \ /
  Last update: 2011-05-27 19:13    [W:0.090 / U:5.548 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site