Messages in this thread | | | Date | Thu, 12 Jun 2014 13:27:11 -0700 | Subject | Re: [PATCH 0/2] make kASLR vs hibernation boot-time selectable | From | Kees Cook <> |
| |
On Thu, Jun 12, 2014 at 12:48 PM, H. Peter Anvin <hpa@zytor.com> wrote: > On 06/12/2014 12:46 PM, Kees Cook wrote: >> Distros want to be able to offer CONFIG_RANDOMIZE_BASE as well as >> CONFIG_HIBERNATION in a single kernel. Instead of making kASLR depend on >> !HIBERNATION at compile time, allow kaslr to be selectable at boot time >> (via "kaslr" kernel command line), which will disable hibernation in the >> kernel. In this way the end user can choose which feature they want more >> with hibernation continuing to stay enabled by default (no surprises). > > Any way we can make them work together instead?
I'm sure there is, but I don't know the solution. :)
At the very least this gets us one step closer (we can build them together).
-Kees
-- Kees Cook Chrome OS Security
| |