Messages in this thread Patch in this message |  | | From | youngjun <> | Subject | [PATCH] arm64: update RANDOMIZE_MODULE_REGION_FULL config description | Date | Sat, 21 Nov 2020 23:08:55 -0800 |
| |
module randomization is reduced. (range to 2 GB) RANDOMIZE_MODULE_REGION_FULL config description is not updated. update RANDOMIZE_MODULE_REGION_FULL config description.
Signed-off-by: youngjun <her0gyugyu@gmail.com> --- arch/arm64/Kconfig | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig index 1515f6f153a0..0da551828a59 100644 --- a/arch/arm64/Kconfig +++ b/arch/arm64/Kconfig @@ -1804,11 +1804,11 @@ config RANDOMIZE_BASE If unsure, say N. config RANDOMIZE_MODULE_REGION_FULL - bool "Randomize the module region over a 4 GB range" + bool "Randomize the module region over a 2 GB range" depends on RANDOMIZE_BASE default y help - Randomizes the location of the module region inside a 4 GB window + Randomizes the location of the module region inside a 2 GB window covering the core kernel. This way, it is less likely for modules to leak information about the location of core kernel data structures but it does imply that function calls between modules and the core -- 2.17.1
|  |