From: Timur Tabi <timur@kernel.org>
To: Kees Cook <keescook@chromium.org>, Pavel Machek <pavel@ucw.cz>
Cc: Steven Rostedt <rostedt@goodmis.org>,
Petr Mladek <pmladek@suse.com>,
Sergey Senozhatsky <sergey.senozhatsky@gmail.com>,
linux-kernel@vger.kernel.org, linux-mm@kvack.org,
willy@infradead.org, akpm@linux-foundation.org,
torvalds@linux-foundation.org, roman.fietze@magna.com,
john.ogness@linutronix.de, akinobu.mita@gmail.com
Subject: Re: [PATCH] lib/vsprintf: make-printk-non-secret printks all addresses as unhashed
Date: Thu, 4 Feb 2021 16:20:45 -0600 [thread overview]
Message-ID: <13fdd006-3070-fb6a-cd99-7f845deb6843@kernel.org> (raw)
In-Reply-To: <202102041415.D9093ED6@keescook>
On 2/4/21 4:17 PM, Kees Cook wrote:
> It's just semantics. Printing addresses DOES weaken the security of a
> system, especially when we know attackers have and do use stuff from dmesg
> to tune their attacks. How about "reduces the security of your system"?
I think we're bikeshedding now, but I can replace "compromise" with
"reduce".
"Kernel memory addresses are exposed, which may reduce the security of
your system."
next prev parent reply other threads:[~2021-02-04 22:20 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-02-02 20:18 Timur Tabi
2021-02-02 21:52 ` Kees Cook
2021-02-02 22:19 ` Timur Tabi
2021-02-02 22:34 ` Steven Rostedt
2021-02-02 22:51 ` Linus Torvalds
2021-02-03 18:53 ` Kees Cook
2021-02-04 20:48 ` Pavel Machek
2021-02-04 20:54 ` Steven Rostedt
2021-02-04 21:49 ` Pavel Machek
2021-02-04 21:59 ` Timur Tabi
2021-02-04 22:06 ` Steven Rostedt
2021-02-04 22:11 ` Pavel Machek
2021-02-04 22:17 ` Kees Cook
2021-02-04 22:20 ` Timur Tabi [this message]
2021-02-04 22:51 ` Pavel Machek
2021-02-04 22:57 ` Pavel Machek
2021-02-04 22:05 ` Steven Rostedt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=13fdd006-3070-fb6a-cd99-7f845deb6843@kernel.org \
--to=timur@kernel.org \
--cc=akinobu.mita@gmail.com \
--cc=akpm@linux-foundation.org \
--cc=john.ogness@linutronix.de \
--cc=keescook@chromium.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=pavel@ucw.cz \
--cc=pmladek@suse.com \
--cc=roman.fietze@magna.com \
--cc=rostedt@goodmis.org \
--cc=sergey.senozhatsky@gmail.com \
--cc=torvalds@linux-foundation.org \
--cc=willy@infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox