Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1762497AbXEKWl2 (ORCPT ); Fri, 11 May 2007 18:41:28 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1754961AbXEKWlU (ORCPT ); Fri, 11 May 2007 18:41:20 -0400 Received: from nz-out-0506.google.com ([64.233.162.237]:25573 "EHLO nz-out-0506.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754492AbXEKWlT (ORCPT ); Fri, 11 May 2007 18:41:19 -0400 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nunoUm5O6L1iaGknFAHEGHPwSw6Fgrw6rfj96mz6ZoWiH2TV4/YIk63nfIBPBluCtH5+dCv6belv9aXsT18G3/ywz+E+s3gnTq2JQWXaLERuhbeiRKz07LQpJ5a6UEbSTtfZXhqTz+9uQcp05KwJCNji+OTTz86kr6f43v2h120= Message-ID: Date: Fri, 11 May 2007 15:41:18 -0700 From: "Ulrich Drepper" To: "Andrew Morton" Subject: Re: [PATCH][RESEND] PIE randomization Cc: "Jiri Kosina" , "Jan Kratochvil" , "Ingo Molnar" , linux-kernel@vger.kernel.org In-Reply-To: <20070511133651.63f8a14d.akpm@linux-foundation.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20070511125629.3df919cf.akpm@linux-foundation.org> <20070511133651.63f8a14d.akpm@linux-foundation.org> Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1046 Lines: 25 On 5/11/07, Andrew Morton wrote: > erm, I was being funny. If you randomize a binary it won't run any more. > cp /dev/random /bin/login. Oh well. > > My point is, we're not being told what is being randomized here. Is it the > virtual starting address of the main executable mmap? Of the shared > libraries also? Is it the stack location? What? PIE = Position Independent Executable, that's how I named them. These are not regular executables, they are basically DSOs but usually compiled with -fpie/-fPIE instead of -fpic/-fPIC and linked with -pie instead of -shared to allow the compiled and linker perform more optimizations. See section 5 in http://people.redhat.com/drepper/nonselsec.pdf Jan unfortunately Ingo's document which doesn't really explain it. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/