lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 2 Mar 2015 14:22:00 -0800 From: Kees Cook <keescook@...omium.org> To: Andrew Morton <akpm@...ux-foundation.org> Cc: Russell King <linux@....linux.org.uk>, Catalin Marinas <catalin.marinas@....com>, Will Deacon <will.deacon@....com>, Ralf Baechle <ralf@...ux-mips.org>, Benjamin Herrenschmidt <benh@...nel.crashing.org>, Paul Mackerras <paulus@...ba.org>, Michael Ellerman <mpe@...erman.id.au>, Martin Schwidefsky <schwidefsky@...ibm.com>, Heiko Carstens <heiko.carstens@...ibm.com>, linux390@...ibm.com, "x86@...nel.org" <x86@...nel.org>, Alexander Viro <viro@...iv.linux.org.uk>, Oleg Nesterov <oleg@...hat.com>, Andy Lutomirski <luto@...capital.net>, "David A. Long" <dave.long@...aro.org>, Andrey Ryabinin <a.ryabinin@...sung.com>, Arun Chandran <achandran@...sta.com>, Yann Droneaud <ydroneaud@...eya.com>, Min-Hua Chen <orca.chen@...il.com>, Paul Burton <paul.burton@...tec.com>, Alex Smith <alex@...x-smith.me.uk>, Markos Chandras <markos.chandras@...tec.com>, Vineeth Vijayan <vvijayan@...sta.com>, Jeff Bailey <jeffbailey@...gle.com>, Michael Holzheu <holzheu@...ux.vnet.ibm.com>, Ben Hutchings <ben@...adent.org.uk>, Behan Webster <behanw@...verseincode.com>, Ismael Ripoll <iripoll@....es>, Hector Marco-Gisbert <hecmargi@....es>, Jan-Simon Möller <dl9pf@....de>, LKML <linux-kernel@...r.kernel.org>, "linux-arm-kernel@...ts.infradead.org" <linux-arm-kernel@...ts.infradead.org>, Linux MIPS Mailing List <linux-mips@...ux-mips.org>, linuxppc-dev@...ts.ozlabs.org, linux-s390@...r.kernel.org, "linux-fsdevel@...r.kernel.org" <linux-fsdevel@...r.kernel.org> Subject: Re: [PATCH 0/5] split ET_DYN ASLR from mmap ASLR On Mon, Mar 2, 2015 at 1:26 PM, Andrew Morton <akpm@...ux-foundation.org> wrote: > On Thu, 26 Feb 2015 19:07:09 -0800 Kees Cook <keescook@...omium.org> wrote: > >> This separates ET_DYN ASLR from mmap ASLR, as already done on s390. The >> various architectures that are already randomizing mmap (arm, arm64, mips, >> powerpc, s390, and x86), have their various forms of arch_mmap_rnd() >> made available via the new CONFIG_ARCH_HAS_ELF_RANDOMIZE. For these >> architectures, arch_randomize_brk() is collapsed as well. >> >> This is an alternative to the solutions in: >> https://lkml.org/lkml/2015/2/23/442 > > "504 Gateway Time-out" > > Hector's original patch had very useful descriptions of the bug, why it > occurred, how it was exploited it and how the patch fixes it. > > Your changelogs contain none of this and can be summarized as "randomly > churn code around for no apparent reason". > > Wanna try again? I guess the [0/5] and [4/5] changelogs are the ones > to fix. Ah, yes, absolutely. I will resend. -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists