Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751798AbdFUSrx (ORCPT ); Wed, 21 Jun 2017 14:47:53 -0400 Received: from mx1.redhat.com ([209.132.183.28]:35972 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751038AbdFUSrw (ORCPT ); Wed, 21 Jun 2017 14:47:52 -0400 DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com A453D3D969 Authentication-Results: ext-mx06.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com Authentication-Results: ext-mx06.extmail.prod.ext.phx2.redhat.com; spf=pass smtp.mailfrom=riel@redhat.com DKIM-Filter: OpenDKIM Filter v2.11.0 mx1.redhat.com A453D3D969 Message-ID: <1498070869.13083.22.camel@redhat.com> Subject: Re: [kernel-hardening] [PATCH] [RFC] binfmt_elf: Use ELF_ET_DYN_BASE only for PIE From: Rik van Riel To: Daniel Micay , Kees Cook Cc: LKML , Qualys Security Advisory , Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , "x86@kernel.org" , Alexander Viro , Dmitry Safonov , Masahiro Yamada , Grzegorz Andrejczuk , "linux-fsdevel@vger.kernel.org" , "kernel-hardening@lists.openwall.com" Date: Wed, 21 Jun 2017 14:47:49 -0400 In-Reply-To: <1498066333.27465.8.camel@gmail.com> References: <20170621055835.GA27467@beast> <1498046876.13083.17.camel@redhat.com> <1498066040.27465.7.camel@gmail.com> <1498066333.27465.8.camel@gmail.com> Organization: Red Hat, Inc Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.30]); Wed, 21 Jun 2017 18:47:51 +0000 (UTC) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 390 Lines: 14 On Wed, 2017-06-21 at 13:32 -0400, Daniel Micay wrote: > On Wed, 2017-06-21 at 10:28 -0700, Kees Cook wrote: > > > The stack rlimit calculation fix for space potentially lost to > > > ASLR > > > is > > > probably still needed too, right? > > > > Yes. Was that picked up by akpm already? > > > > -Kees > > I think it was dropped when the ET_DYN changes were dropped. I can resend those.