Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease ofattacking

[Ingo Molnar]

* H. Peter Anvin <hpa@xxxxxxxxx> wrote:

> Now, *relative* symbol addresses will typically not have any randomness at all, 
> which may limit the usefulness, of course.

Yeah - but it happens quite often that the scope of the vulnerability only allows 
absolute addresses. In fact it's a pretty common case: basically most derefs into 
attacker-controlled data pointers are like that.

Thanks,

	Ingo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/