Re: [PATCH][RESEND] PIE randomization

From: Jiri Kosina
Date: Fri May 11 2007 - 16:18:40 EST


On Fri, 11 May 2007, Andrew Morton wrote:

> > I sent this patch 5 days ago, nobody replied. So I am giving it
> > second attempt. Andrew, is it possible to test this in -mm branch?
> > Original mail follows:
> > this is something like reaction to this thread:
> > http://lkml.org/lkml/2007/1/6/124. I hope I was able to separate the
> > PIE randomization part correctly.
> I don't know what to do with this. The changelog doesn't tell me what PIE
> randomization _is_, nor why the kernel would want to do it. "Randomizing
> -pie compiled binaries" sounds fairly undesirable, actually ;)

I think it's precisely what we want to do in case the randomize_va_space
is set to 1, don't we? (I haven't yet gone throught the patch though, so I
am not sure whether this is the case).

We already have stack randomization and mmap() base randomization but
executable base randomization (which is of course only feasible for -pie
executables) and brk() randomization still seem to be missing to make it
complete.

--
Jiri Kosina
SUSE Labs
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/