Messages in this thread | | | Date | Fri, 24 Mar 2017 10:40:34 +0100 | From | Borislav Petkov <> | Subject | Re: [PATCH v2] x86/mm/KASLR: EFI region is mistakenly included into KASLR VA space for randomization |
| |
On Fri, Mar 24, 2017 at 09:37:36AM +0000, Ard Biesheuvel wrote: > No. It is the firmware's EFI code, and the virtual translation applied > by the OS is made known to the firmware by means of a call into the > runtime service SetVirtualAddressMap().
We can still randomize within those 64G before calling SetVirtualAddressMap(). The question is, do we want to or need to, even?
-- Regards/Gruss, Boris.
Good mailing practices for 400: avoid top-posting and trim the reply.
| |