Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX

From	Christoph Lameter <cl@linux.com>
Newsgroups	linux.kernel
Subject	Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX
Date	2016-01-07 17:30 +0100
Message-ID	<qOlBN-29Y-27@gated-at.bofh.it> (permalink)
References	<qIm7v-75a-1@gated-at.bofh.it> <qIxFE-694-23@gated-at.bofh.it> <qIBpV-8vR-27@gated-at.bofh.it> <qNJPQ-1OH-7@gated-at.bofh.it> <qNMNI-3T4-9@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, 5 Jan 2016, Laura Abbott wrote:

> It's not the poisoning per se that's incompatible, it's how the poisoning is
> set up. At least for slub, the current poisoning is part of SLUB_DEBUG which
> enables other consistency checks on the allocator. Trying to pull out just
> the poisoning for use when SLUB_DEBUG isn't on would result in roughly what
> would be here anyway. I looked at trying to reuse some of the existing
> poisoning
> and came to the conclusion it was less intrusive to the allocator to keep it
> separate.

SLUB_DEBUG does *not* enable any debugging features. It builds the logic
for debugging into the kernel but does not activate it. CONFIG_SLUB_DEBUG
is set for production kernels. The poisoning is build in by default into
any recent linux kernel out there. You can enable poisoning selectively
(and no other debug feature) by specifying slub_debug=P on the Linux
kernel command line right now.

There is a SLAB_POISON flag for each kmem_cache that can be set to
*only* enable poisoning and nothing else from code.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Thread

Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Kees Cook <keescook@chromium.org> - 2016-01-06 01:10 +0100
  Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Laura Abbott <laura@labbott.name> - 2016-01-06 04:20 +0100
    Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Christoph Lameter <cl@linux.com> - 2016-01-07 17:30 +0100
      Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Laura Abbott <laura@labbott.name> - 2016-01-08 02:30 +0100
        Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Christoph Lameter <cl@linux.com> - 2016-01-08 15:10 +0100
          Re: [RFC][PATCH 0/7] Sanitization of slabs based on grsecurity/PaX Laura Abbott <laura@labbott.name> - 2016-01-14 05:00 +0100

csiph-web