Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1372795
| From | Pavel Machek <pavel@denx.de> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH] Prefer kASLR over Hibernation |
| Date | 2016-04-06 22:20 +0200 |
| Message-ID | <rl25I-Tp-9@gated-at.bofh.it> (permalink) |
| References | <rl1CG-rk-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hi! > When building with both CONFIG_HIBERNATION and CONFIG_RANDOMIZE_BASE, > one or the other must be chosen at boot-time. Until now, hibernation > was selected when no choice was made on the command line. > > To make the security benefits of kASLR more widely available to end > users (since the use of hibernation is becoming more rare and kASLR, > already available on x86, will be available on arm64 and MIPS soon), > this changes the default to preferring kASLR over hibernation. Users > wanting hibernation can turn off kASLR by adding "nokaslr" to the kernel > command line. I must say I don't exactly like this patch. Why is kASLR incompatible with hibernation? We can hibernate have 4.3 kernel resume hibernation image of 4.2 kernel (on x86-64, and I have patches for x86). Resuming kernel with different randomization does not look that much different... Best regards, Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-06 21:50 +0200
Re: [PATCH] Prefer kASLR over Hibernation Pavel Machek <pavel@denx.de> - 2016-04-06 22:20 +0200
Re: [PATCH] Prefer kASLR over Hibernation Linus Torvalds <torvalds@linux-foundation.org> - 2016-04-06 23:00 +0200
Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-06 23:30 +0200
Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-06 23:50 +0200
Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 00:00 +0200
Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-07 00:40 +0200
Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 03:00 +0200
Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-06 23:50 +0200
Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 00:00 +0200
Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-07 00:10 +0200
Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-07 00:20 +0200
Re: [PATCH] Prefer kASLR over Hibernation Paul Bolle <pebolle@tiscali.nl> - 2016-04-07 00:50 +0200
Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 02:10 +0200
Re: [PATCH] Prefer kASLR over Hibernation James Morse <james.morse@arm.com> - 2016-04-11 10:10 +0200
Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-11 20:10 +0200
Re: [PATCH] Prefer kASLR over Hibernation Geert Uytterhoeven <geert@linux-m68k.org> - 2016-04-11 20:30 +0200
Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-11 20:50 +0200
Re: [PATCH] Prefer kASLR over Hibernation James Morse <james.morse@arm.com> - 2016-04-12 20:00 +0200
csiph-web