Date: Thu, 18 May 2006 09:54:37 +0200
From: Ingo Molnar <mingo@elte.hu>
To: Rusty Russell <rusty@rustcorp.com.au>
Cc: lkml - Kernel Mailing List <linux-kernel@vger.kernel.org>,
       Linus Torvalds <torvalds@osdl.org>,
       virtualization <virtualization@lists.osdl.org>,
       Gerd Hoffmann <kraxel@suse.de>, Zachary Amsden <zach@vmware.com>
Subject: Re: [PATCH] Gerd Hoffman's move-vsyscall-into-user-address-range patch
Message-ID: <20060518075437.GA29747@elte.hu>
References: <1147759423.5492.102.camel@localhost.localdomain> <20060516064723.GA14121@elte.hu> <1147852189.1749.28.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1147852189.1749.28.camel@localhost.localdomain>
User-Agent: Mutt/1.4.2.1i
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1126
Lines: 29


* Rusty Russell <rusty@rustcorp.com.au> wrote:

> 	Thanks, I looked at the exec-shield patch.  It has some rough 
> edges (at least the 2.6.16 version I found).

the most recent one is always in the Fedora rawhide kernel RPM/SRPM. 
(that means it closely tracks upstream.)

> 	Gerd's is basically a minimal subset of the exec-shield: we 
> can go further towards exec-shield by using get_unmapped_area for the 
> vsyscall page rather than nailing it above the stack, but it takes us 
> from a 280-line patch to a 480-line patch.

certainly looks good to me! What are the changes you did to the 
exec-shield implementation of vdso randomization? The patch seems 
largely identical to the one in exec-shield.

(and it would be nice to do this on x86_64 too - exploits already exist 
using the fixmapped VDSO there as a trampoline.)

Signed-off-by: Ingo Molnar <mingo@elte.hu>

	Ingo
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/