From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wm0-f49.google.com (mail-wm0-f49.google.com [74.125.82.49]) by kanga.kvack.org (Postfix) with ESMTP id 1D7636B0253 for ; Thu, 7 Apr 2016 12:18:07 -0400 (EDT) Received: by mail-wm0-f49.google.com with SMTP id l6so32425891wml.1 for ; Thu, 07 Apr 2016 09:18:07 -0700 (PDT) Received: from molly.corsac.net (pic75-3-78-194-244-226.fbxo.proxad.net. [78.194.244.226]) by mx.google.com with ESMTPS id e19si9756392wme.19.2016.04.07.09.18.05 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 07 Apr 2016 09:18:06 -0700 (PDT) Received: from corsac.net (unknown [IPv6:2a01:e34:ec2f:4e21::1]) by molly.corsac.net (Postfix) with ESMTPS id 1532284 for ; Thu, 7 Apr 2016 18:18:03 +0200 (CEST) Message-ID: <1460045867.2818.67.camel@debian.org> Subject: Re: [kernel-hardening] Re: [RFC v1] mm: SLAB freelist randomization From: Yves-Alexis Perez Date: Thu, 07 Apr 2016 18:17:47 +0200 In-Reply-To: References: <1459971348-81477-1-git-send-email-thgarnie@google.com> Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-biMppi13q/Rue9M3C58x" Mime-Version: 1.0 Sender: owner-linux-mm@kvack.org List-ID: To: kernel-hardening@lists.openwall.com, Thomas Garnier Cc: Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Greg Thelen , LKML , Linux-MM , Laura Abbott --=-biMppi13q/Rue9M3C58x Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On mer., 2016-04-06 at 14:45 -0700, Kees Cook wrote: > > This security feature reduces the predictability of > > the kernel slab allocator against heap overflows. >=20 > I would add "... rendering attacks much less stable." And if you can > find a specific example exploit that is foiled by this, I would refer > to it. One good example might (or might not) be the keyring issue from earlier thi= s year (CVE-2016-0728): http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-= ker nel-vulnerability-cve-2016-0728/ Regards, --=20 Yves-Alexis --=-biMppi13q/Rue9M3C58x Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAABCAAGBQJXBogrAAoJEG3bU/KmdcClQKsH/1y013Vezh04OGPgpDotuaC4 w6CHEpjyFdxg2WZCEoJuV7EeSiAYmczw9uRKAGAeJ+gXdmf+z66U2FwqXkvJlkGc 2sFBpsO/JYNydlyfsc7r8LVP5/PzTazm4Ww1nWYQPKCj65cQhy9yczsn2SgUDGgL IN8ks/AJNZT2qxuYsr8E6dmv448xf4u/p9HTf9MGfv0S3/4CeeU2+BjPQnOCmGuP yxvYVIxxavHICp8We+fyNDIYva+nKtLSvETuwF4QkxuscJrY17xI04rLIK0alTiT EyqvZluPVWRgQ3Hm945gLf4ifXsNiTgOKKuurLrMVdCe6UEu0p8b0LiAGMvi8E0= =62+d -----END PGP SIGNATURE----- --=-biMppi13q/Rue9M3C58x-- -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org