lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 3 Jan 2022 17:59:27 +0100 From: Borislav Petkov <bp@...en8.de> To: Alexander Lobakin <alexandr.lobakin@...el.com> Cc: linux-hardening@...r.kernel.org, x86@...nel.org, Jesse Brandeburg <jesse.brandeburg@...el.com>, Kristen Carlson Accardi <kristen@...ux.intel.com>, Kees Cook <keescook@...omium.org>, Miklos Szeredi <miklos@...redi.hu>, Ard Biesheuvel <ardb@...nel.org>, Tony Luck <tony.luck@...el.com>, Bruce Schlobohm <bruce.schlobohm@...el.com>, Jessica Yu <jeyu@...nel.org>, kernel test robot <lkp@...el.com>, Miroslav Benes <mbenes@...e.cz>, Evgenii Shatokhin <eshatokhin@...tuozzo.com>, Jonathan Corbet <corbet@....net>, Masahiro Yamada <masahiroy@...nel.org>, Michal Marek <michal.lkml@...kovi.net>, Nick Desaulniers <ndesaulniers@...gle.com>, Herbert Xu <herbert@...dor.apana.org.au>, "David S. Miller" <davem@...emloft.net>, Thomas Gleixner <tglx@...utronix.de>, Will Deacon <will@...nel.org>, Ingo Molnar <mingo@...hat.com>, Dave Hansen <dave.hansen@...ux.intel.com>, "H. Peter Anvin" <hpa@...or.com>, Andy Lutomirski <luto@...nel.org>, Peter Zijlstra <peterz@...radead.org>, Arnd Bergmann <arnd@...db.de>, Josh Poimboeuf <jpoimboe@...hat.com>, Nathan Chancellor <nathan@...nel.org>, Masami Hiramatsu <mhiramat@...nel.org>, Marios Pomonis <pomonis@...gle.com>, Sami Tolvanen <samitolvanen@...gle.com>, "H.J. Lu" <hjl.tools@...il.com>, Nicolas Pitre <nico@...xnic.net>, linux-kernel@...r.kernel.org, linux-kbuild@...r.kernel.org, linux-arch@...r.kernel.org, live-patching@...r.kernel.org, llvm@...ts.linux.dev Subject: Re: [PATCH v9 03/15] kallsyms: Hide layout On Mon, Jan 03, 2022 at 04:40:23PM +0100, Alexander Lobakin wrote: > "kallsyms: randomize /proc/kallsyms output order"? Better. > It displays zeros for non-roots, but the symbols are still sorted by > their addresses. As a result, if you leak one address, you could > determine some others. Because if an attacker has the corresponding vmlinux, he has the offsets too so, game over? > This is especially critical with FG-KASLR as its text layout is > random each time and sorted /proc/kallsyms would make the entire > feature useless. Do you notice how exactly this needs to absolutely be in the commit message? Instead of that "this patch" bla which is more or less obvious. IOW, always talk about *why* you're doing a change. > I either have some problems with checkpatch + codespell, or they > missed all that typos you're noticing. Thanks, and apologies =\ No worries, and thank python's enchant module which I use to spellcheck stuff. So lemme look at the actual patch then :) Thx. -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette
Powered by blists - more mailing lists