Messages in this thread | | | Date | Fri, 25 Jul 2014 16:43:20 -0700 | From | "H. Peter Anvin" <> | Subject | Re: General flags to turn things off (getrandom, pid lookup, etc) |
| |
On 07/25/2014 11:30 AM, Andy Lutomirski wrote: > - 32-bit GDT code segments [huge attack surface] > - 64-bit GDT code segments [probably pointless]
I presume you mean s/GDT/LDT/.
We already don't allow 64-bit LDT code segments. Also, it is unclear to me how 32-bit LDT segments have a huge attack surface, given that there will realistically always be a 32-bit *GDT* segment present.
-hpa
| |