Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S935199Ab1ETS1X (ORCPT ); Fri, 20 May 2011 14:27:23 -0400 Received: from smtp.outflux.net ([198.145.64.163]:41201 "EHLO smtp.outflux.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S934878Ab1ETS1V (ORCPT ); Fri, 20 May 2011 14:27:21 -0400 Date: Fri, 20 May 2011 11:27:05 -0700 From: Kees Cook To: Linus Torvalds Cc: Dan Rosenberg , Ingo Molnar , linux-kernel@vger.kernel.org, davej@redhat.com, davem@davemloft.net, eranian@google.com, adobriyan@gmail.com, penberg@kernel.org Subject: Re: [BUG] perf: bogus correlation of kernel symbols Message-ID: <20110520182705.GU25448@outflux.net> References: <1305292059.1949.0.camel@dan> <1305293345.1949.22.camel@dan> <20110516153527.GC21107@elte.hu> <1305852966.3005.19.camel@dan> <20110520120750.GJ14745@elte.hu> <1305896093.3005.24.camel@dan> <20110520131108.GA17699@elte.hu> <1305913261.20623.12.camel@dan> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Canonical X-HELO: www.outflux.net Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1692 Lines: 40 On Fri, May 20, 2011 at 11:14:09AM -0700, Linus Torvalds wrote: > On Fri, May 20, 2011 at 10:41 AM, Dan Rosenberg > wrote: > > > > Also, I'd still welcome suggestions on generating entropy so early in > > the boot process as to randomize the location at which the kernel is > > decompressed. > > The fundamental problem with the whole kernel address randomization is > sadly totally unrelated to any of the small details. > > There's a *big* detail that makes it hard: there's only a few bits of > randomness we can add to the address. The kernel base address ends up > having various fundamental limitations (cacheline alignment for the > code, and we have several segments that require page alignment), so > you really can't realistically do more than something like 8-12 bits > of address randomization. > > Which means that once you have a vmlinux image (say, because it's a > standard distro kernel), you only need to try your exploit a few > hundred times. That can be done quickly enough that no MIS person will > ever have time to react to the attack. > > Sure, it will likely leave some hints around (oopses etc), but still.. Certain flaws will present that way, yes. Others will take the entire system down on the first missed address guess. Many times, ASLR will give a statistical advantage to the defender. As a result it has value, even if it's not perfect. -Kees -- Kees Cook Ubuntu Security Team -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/