Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #76001 > unrolled thread

Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y

Started byintrigeri <intrigeri@boum.org>
First post2022-07-26 10:40 +0200
Last post2022-12-22 22:40 +0100
Articles 3 — 3 participants

Back to article view | Back to linux.debian.kernel


Contents

  Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y intrigeri <intrigeri@boum.org> - 2022-07-26 10:40 +0200
    Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y Diederik de Haas <didi.debian@cknow.org> - 2022-07-26 14:00 +0200
    Bug#1016056: marked as done (src:linux: Please enable  CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-12-22 22:40 +0100

#76001 — Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y

Fromintrigeri <intrigeri@boum.org>
Date2022-07-26 10:40 +0200
SubjectBug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
Message-ID<ENogF-dUZt-11@gated-at.bofh.it>
Source: linux
Version: 5.18.14-1
Severity: wishlist
User: tails-dev@boum.org
Usertags: hardening

Hi!

Please consider setting CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
(5.13 or newer).

This enables a security feature with low performance overhead.

Original pull request:
https://lkml.iu.edu/hypermail/linux/kernel/2104.3/01302.html

Ubuntu 22.04 LTS has this setting enabled by default.

KSPP recommends enabling it:
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings

Thanks for your attention,
cheers!
-- 
intrigeri

[toc] | [next] | [standalone]


#76004

FromDiederik de Haas <didi.debian@cknow.org>
Date2022-07-26 14:00 +0200
Message-ID<ENrod-dWKr-5@gated-at.bofh.it>
In reply to#76001

[Multipart message — attachments visible in raw view] — view raw

On dinsdag 26 juli 2022 10:27:24 CEST intrigeri wrote:
> Original pull request:
> https://lkml.iu.edu/hypermail/linux/kernel/2104.3/01302.html

https://lore.kernel.org/all/20210401232347.2791257-1-keescook@chromium.org/ 
seems to be the corresponding link on 'lore'.

[toc] | [prev] | [next] | [standalone]


#77690 — Bug#1016056: marked as done (src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-12-22 22:40 +0100
SubjectBug#1016056: marked as done (src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y)
Message-ID<FFBse-cuAn-15@gated-at.bofh.it>
In reply to#76001

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 22 Dec 2022 21:26:49 +0000
with message-id <E1p8T5V-003Tvz-MG@fasolo.debian.org>
and subject line Bug#1016056: fixed in linux 6.1.1-1~exp1
has caused the Debian Bug report #1016056,
regarding src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1016056: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016056
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web