Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1656711

Re: [kernel-hardening] [PATCH 0/6] move mmap_area and PIE binaries away from the stack

From Kees Cook <keescook@chromium.org>
Newsgroups linux.kernel
Subject Re: [kernel-hardening] [PATCH 0/6] move mmap_area and PIE binaries away from the stack
Date 2017-06-03 06:40 +0200
Message-ID <tO90Z-2kn-5@gated-at.bofh.it> (permalink)
References <tNWGu-2XT-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Fri, Jun 2, 2017 at 8:20 AM,  <riel@redhat.com> wrote:
> There are a few bugs causing the kernel to sometimes map PIE
> binaries and the mmap_area where the stack is supposed to go.
>
> This series fixes them for x86, ARM64, and PPC.
> S390 seems to be ok.
>
> If people are fine with this approach, I can work my way
> through other architectures, too.

Andrew, I'd rather the ELF_ET_DYN_BASE changes not be in -mm yet. I
think it's the wrong approach. Patch 1 (comment update) is fine.
Patches 3 and 4 need some (minor?) adjustments, but the ELF_DYN_BASE
patches need much more thought, IMO (I've sent a separate email about
those.) And please add me to explicit the Cc list for this series.

-Kees

-- 
Kees Cook
Pixel Security

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 0/6] move mmap_area and PIE binaries away from the stack riel@redhat.com - 2017-06-02 17:30 +0200
  [PATCH 1/6] binfmt_elf: document load_bias a little bit riel@redhat.com - 2017-06-02 17:30 +0200
    Re: [kernel-hardening] [PATCH 1/6] binfmt_elf: document load_bias a  little bit Kees Cook <keescook@chromium.org> - 2017-06-02 21:30 +0200
  [PATCH 6/6] powerpc,mmap: properly account for stack randomization in mmap_base riel@redhat.com - 2017-06-02 17:30 +0200
  [PATCH 4/6] arm64/mmap: properly account for stack randomization in mmap_base riel@redhat.com - 2017-06-02 17:30 +0200
  [PATCH 2/6] x86/elf: move 32 bit ELF_ET_DYN_BASE to 256MB riel@redhat.com - 2017-06-02 17:30 +0200
    Re: [PATCH 2/6] x86/elf: move 32 bit ELF_ET_DYN_BASE to 256MB Kees Cook <keescook@chromium.org> - 2017-06-03 06:30 +0200
      Re: [PATCH 2/6] x86/elf: move 32 bit ELF_ET_DYN_BASE to 256MB Daniel Micay <danielmicay@gmail.com> - 2017-06-03 14:00 +0200
      Re: [PATCH 2/6] x86/elf: move 32 bit ELF_ET_DYN_BASE to 256MB Rik van Riel <riel@redhat.com> - 2017-06-05 16:00 +0200
  [PATCH 3/6] x86/mmap: properly account for stack randomization in mmap_base riel@redhat.com - 2017-06-02 17:30 +0200
    Re: [kernel-hardening] [PATCH 3/6] x86/mmap: properly account for  stack randomization in mmap_base Kees Cook <keescook@chromium.org> - 2017-06-03 06:50 +0200
      Re: [kernel-hardening] [PATCH 3/6] x86/mmap: properly account for  stack randomization in mmap_base Daniel Micay <danielmicay@gmail.com> - 2017-06-03 14:20 +0200
  [PATCH 5/6] arm64: move COMPAT_ELF_ET_DYN_BASE lower in the address space riel@redhat.com - 2017-06-02 17:30 +0200
  Re: [kernel-hardening] [PATCH 0/6] move mmap_area and PIE binaries  away from the stack Kees Cook <keescook@chromium.org> - 2017-06-03 06:40 +0200
    Re: [kernel-hardening] [PATCH 0/6] move mmap_area and PIE binaries  away from the stack Daniel Micay <danielmicay@gmail.com> - 2017-06-03 14:20 +0200

csiph-web