Re: [PATCH v5 9/9] x86-64: Add CONFIG_UNSAFE_VSYSCALLS tofeature-removal-schedule
From: Ingo Molnar
Date: Mon Jun 06 2011 - 15:26:14 EST
* pageexec@xxxxxxxxxxx <pageexec@xxxxxxxxxxx> wrote:
> [...] it goes like 'I am not willing to do A because it would help
> script kiddies but I'd rather do B that would help script kiddies'.
> with A = 'disclose security bugs' and B = 'keep the last roadblock
> that prevents full ASLR'.
No, that's wrong, the logic goes like this:
if i do A then it has X1 advantages and Y1 disadvantages.
if i do B then it has X2 advantages and Y2 disadvantages.
The Y1 and Y2 set of disadvantages can both include "making it easier
for script kiddies" but the sets of advantages and disadvantages can
also include MANY OTHER considerations, making the decision unique in
each case.
To translate it to this specific case (extremely simplifed, so please
don't nit-pick that my descriptions of advantages and disadvantages
are not precise nor complete):
A) "i put a zero day exploit and a CVE code into a changelog"
Advantages: - it describes the problem more fully
Disadvantages: - it makes it easier for people (including script kiddies) do harm faster
- creates a false, misleading category for "security bugs"
B) "i obfuscate the vsyscall page"
Advantages: - it makes it statistically harder for people (including script kiddies) to do harm
Disadvantages: - it reduces the incentive to fix *real* security bugs
- complicates the code
Do you see how A) and B) are not equivalent at all? Different cases,
different attributes, different probabilities and different
considerations.
> but it's very simple logic Ingo.
Please drop the condescending tone, i think it should be clear to you
by now that i have a good basis to disagree with you.
Thanks,
Ingo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/