Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1372888

Re: [PATCH] Prefer kASLR over Hibernation

Show all headers | View raw

On Wed, Apr 6, 2016 at 11:56 PM, Ingo Molnar <mingo@kernel.org> wrote:
>
> * Rafael J. Wysocki <rafael@kernel.org> wrote:
>
>> On Wed, Apr 6, 2016 at 9:44 PM, Kees Cook <keescook@chromium.org> wrote:
>> > When building with both CONFIG_HIBERNATION and CONFIG_RANDOMIZE_BASE,
>> > one or the other must be chosen at boot-time. Until now, hibernation
>> > was selected when no choice was made on the command line.
>> >
>> > To make the security benefits of kASLR more widely available to end
>> > users (since the use of hibernation is becoming more rare and kASLR,
>> > already available on x86, will be available on arm64 and MIPS soon),
>> > this changes the default to preferring kASLR over hibernation. Users
>> > wanting hibernation can turn off kASLR by adding "nokaslr" to the kernel
>> > command line.
>> >
>> > Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
>> > Signed-off-by: Kees Cook <keescook@chromium.org>
>>
>> Acked-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
>>
>> Or do you want me to apply it?
>
> I don't think this is a good idea, as it turns off emergency hibernation of
> laptops - many desktop distros support it by default.

Right, I forgot about this one.

Thanks,
Rafael

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-06 21:50 +0200
  Re: [PATCH] Prefer kASLR over Hibernation Pavel Machek <pavel@denx.de> - 2016-04-06 22:20 +0200
    Re: [PATCH] Prefer kASLR over Hibernation Linus Torvalds <torvalds@linux-foundation.org> - 2016-04-06 23:00 +0200
      Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-06 23:30 +0200
        Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-06 23:50 +0200
          Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 00:00 +0200
            Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-07 00:40 +0200
              Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 03:00 +0200
  Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-06 23:50 +0200
    Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 00:00 +0200
      Re: [PATCH] Prefer kASLR over Hibernation "Rafael J. Wysocki" <rafael@kernel.org> - 2016-04-07 00:10 +0200
        Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-07 00:20 +0200
          Re: [PATCH] Prefer kASLR over Hibernation Paul Bolle <pebolle@tiscali.nl> - 2016-04-07 00:50 +0200
          Re: [PATCH] Prefer kASLR over Hibernation Ingo Molnar <mingo@kernel.org> - 2016-04-07 02:10 +0200
  Re: [PATCH] Prefer kASLR over Hibernation James Morse <james.morse@arm.com> - 2016-04-11 10:10 +0200
    Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-11 20:10 +0200
      Re: [PATCH] Prefer kASLR over Hibernation Geert Uytterhoeven <geert@linux-m68k.org> - 2016-04-11 20:30 +0200
        Re: [PATCH] Prefer kASLR over Hibernation Kees Cook <keescook@chromium.org> - 2016-04-11 20:50 +0200
      Re: [PATCH] Prefer kASLR over Hibernation James Morse <james.morse@arm.com> - 2016-04-12 20:00 +0200

csiph-web