Re: [PATCH v4 3/3] x86 mm, x86 architecture (32-bit and 64-bit): arch/x86/mm/kaslr.c: Adds 64bits version of prandom_seed_state
From: H. Peter Anvin
Date: Tue Jan 17 2023 - 19:28:48 EST
On 1/17/23 13:16, David Keisar Schm wrote:
Because (the way we understand this), Kees Cook prefers to keep the
original API, so that a fixed seed can be injected at will (for
debugging). Seehttps://lkml.org/lkml/2023/1/6/772
<https://lkml.org/lkml/2023/1/6/772>
This bothers me, because with FG-KASLR is *exactly* when a bad PRNG will
shine through.
-hpa