| Date | Thu, 4 Apr 2013 13:19:21 -0700 | Subject | Re: [PATCH 3/3] x86: kernel base offset ASLR | From | Julien Tinnes <> |
| |
On Thu, Apr 4, 2013 at 1:12 PM, H. Peter Anvin <hpa@zytor.com> wrote: > On 04/04/2013 01:07 PM, Kees Cook wrote: >> However, the benefits of >> this feature in certain environments exceed the perceived weaknesses[2]. > > Could you clarify?
I think privilege reduction in general, and sandboxing in particular, can make KASLR even more useful. A lot of the information leaks can be mitigated in the same way as attack surface and vulnerabilities can be mitigated.
Julien
|