Messages in this thread | | | Date | Fri, 24 Mar 2017 10:46:56 +0100 | From | Borislav Petkov <> | Subject | Re: [PATCH v2] x86/mm/KASLR: EFI region is mistakenly included into KASLR VA space for randomization |
| |
On Fri, Mar 24, 2017 at 09:42:40AM +0000, Ard Biesheuvel wrote: > That is a different matter. If the regions are only mapped while > runtime services invocations are in progress (as we do on ARM), I am > not sure if it matters that much, given how rarely that occurs in > normal use.
Question is, is there anything worth protecting with ASLR or we don't care? I wanna say, we should randomize just in case, especially as it shouldn't be that expensive to do.
Also, how does the whole EFI-in-the-kexec-ed-kernel work on ARM? Runtime services get mapped on-demand in the kexec-ed kernel too?
-- Regards/Gruss, Boris.
Good mailing practices for 400: avoid top-posting and trim the reply.
| |