Re: hardening-check can detect whether kernel is protected or not

From	Yves-Alexis Perez <corsac@debian.org>
Newsgroups	linux.debian.kernel
Subject	Re: hardening-check can detect whether kernel is protected or not
Date	2019-01-02 15:30 +0100
Message-ID	<xbPGV-7MM-5@gated-at.bofh.it> (permalink)
References	<xbPGV-7MM-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, 2019-01-02 at 03:08 +0100, Mikhail Morfikov wrote:
> So does the kernel is protected or not? If yes, why hardening-check can't detect it?
> Also how to get "not stripped" instead of "stripped" kernel?

Hi,

the kernel is not a standard ELF binary, so you can't really run hardening-
check on it and expect sound results.

Yes, the kernel has some protection/hardening (see for example the work done
by the Kernel Self Protection Project).

Regards,
- -- 
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlwsyqUACgkQ3rYcyPpX
RFtdiAgAvD9bj/rTlhbHMOkSQQbgoAcpksqIFJQ9HaCMVjDwb6RWc3Dz0IQItJnu
nj2tLZ6An8LJXo5oAoMTCBvBvWGt4/NsedYdVa1Q/610llWJqHg/VfMR4TZaoN8J
0ZWCGD2qwAMx5MZYJ7GQYlXqRpBp+aRvdHd3+DlDo7O+vEKuoQb0bXYolqkgnV4L
UQGgtbCjVfE7V3/pmfBOMBk6ZhpxilLROmFTtL5abtNh81T6P+sOaFKfOjRcufE3
Tmb7qqK9IRJLL48WUtwX5mXyWl/TOTaig23ESfwWOvmCy1pGvh4fERpY9k3W9Y2T
D9iXxQ4nN6yBUu9PXxs76h/IglBEVg==
=ORnQ
-----END PGP SIGNATURE-----

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: hardening-check can detect whether kernel is protected or not Yves-Alexis Perez <corsac@debian.org> - 2019-01-02 15:30 +0100
  Re: hardening-check can detect whether kernel is protected or not Yves-Alexis Perez <corsac@debian.org> - 2019-01-02 17:50 +0100

csiph-web