| From | Kees Cook <> | Subject | [PATCH 0/3] kernel ASLR | Date | Thu, 4 Apr 2013 13:07:32 -0700 |
| |
Hello,
This patch series implements per-boot kernel base offset ASLR. It is based on work by Dan Rosenberg, Neill Clift, Michael Davidson, and myself. Since Dan's original thread[1], this code has been improved to work on 64-bit, among other things.
This is presently in use at Google, and is being ported to Chrome OS. It has several limitations currently, but I wanted to get the ball rolling again on upstreaming this. More details are in the individual patches. They are split into three pieces: the offset selection logic, the 64-bit relocation logic, and finally putting the offset to use at boot time.
Thanks,
-Kees
[1] http://lkml.indiana.edu/hypermail/linux/kernel/1105.3/index.html#00520
|