Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-26 Thread Michal Hocko
On Fri 23-06-17 12:20:25, Kees Cook wrote: > On Fri, Jun 23, 2017 at 7:06 AM, Michal Hocko wrote: > > On Tue 20-06-17 16:09:11, Kees Cook wrote: > >> Some hardened environments want to build kernels with slab_nomerge > >> already set (so that they do not depend on remembering to set the kernel > >

Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-23 Thread Kees Cook
On Fri, Jun 23, 2017 at 7:06 AM, Michal Hocko wrote: > On Tue 20-06-17 16:09:11, Kees Cook wrote: >> Some hardened environments want to build kernels with slab_nomerge >> already set (so that they do not depend on remembering to set the kernel >> command line option). This is desired to reduce the

Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-23 Thread Michal Hocko
On Tue 20-06-17 16:09:11, Kees Cook wrote: > Some hardened environments want to build kernels with slab_nomerge > already set (so that they do not depend on remembering to set the kernel > command line option). This is desired to reduce the risk of kernel heap > overflows being able to overwrite ob

Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-20 Thread Randy Dunlap
On 06/20/2017 04:29 PM, Kees Cook wrote: > On Tue, Jun 20, 2017 at 4:16 PM, Randy Dunlap wrote: >> On 06/20/2017 04:09 PM, Kees Cook wrote: >>> Some hardened environments want to build kernels with slab_nomerge >>> already set (so that they do not depend on remembering to set the kernel >>> comman

Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-20 Thread Kees Cook
On Tue, Jun 20, 2017 at 4:16 PM, Randy Dunlap wrote: > On 06/20/2017 04:09 PM, Kees Cook wrote: >> Some hardened environments want to build kernels with slab_nomerge >> already set (so that they do not depend on remembering to set the kernel >> command line option). This is desired to reduce the r

Re: [PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-20 Thread Randy Dunlap
On 06/20/2017 04:09 PM, Kees Cook wrote: > Some hardened environments want to build kernels with slab_nomerge > already set (so that they do not depend on remembering to set the kernel > command line option). This is desired to reduce the risk of kernel heap > overflows being able to overwrite obje

[PATCH v2] mm: Allow slab_nomerge to be set at build time

2017-06-20 Thread Kees Cook
Some hardened environments want to build kernels with slab_nomerge already set (so that they do not depend on remembering to set the kernel command line option). This is desired to reduce the risk of kernel heap overflows being able to overwrite objects from merged caches and changes the requiremen