lkml.org 
[lkml]   [2011]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC][PATCH] Randomize kernel base address on boot
    On Fri, May 27, 2011 at 10:13:54AM -0700, H. Peter Anvin wrote:
    > On 05/27/2011 10:10 AM, Dan Rosenberg wrote:
    > >
    > > Just to play devil's advocate, how is it easier for a local attacker to
    > > figure out where kernel internals are if it's been relinked vs.
    > > randomized at load time, assuming we follow through on fixing the info
    > > leaks?
    > >
    >
    > You can read the on-disk kernel file and find out.

    If we're still operating under the assumption of "defend against non-root",
    distros can trivially make the on-disk kernels 0400.

    -Kees

    --
    Kees Cook
    Ubuntu Security Team


    \
     
     \ /
      Last update: 2011-05-27 19:23    [W:0.048 / U:0.272 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site