Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-09 Thread Kees Cook
On Mon, Nov 9, 2015 at 10:56 AM, Daniel Cashman wrote: > On 11/08/2015 07:47 PM, Michael Ellerman wrote: >> On Fri, 2015-11-06 at 12:52 -0800, Kees Cook wrote: >>> On Thu, Nov 5, 2015 at 10:44 AM, Daniel Cashman >>> wrote: On 11/04/2015 10:30 AM, Daniel Cashman wrote: > On 11/3/15 3:21

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-09 Thread Daniel Cashman
On 11/08/2015 07:47 PM, Michael Ellerman wrote: > On Fri, 2015-11-06 at 12:52 -0800, Kees Cook wrote: >> On Thu, Nov 5, 2015 at 10:44 AM, Daniel Cashman wrote: >>> On 11/04/2015 10:30 AM, Daniel Cashman wrote: On 11/3/15 3:21 PM, Kees Cook wrote: > On Tue, Nov 3, 2015 at 3:14 PM, Daniel C

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-08 Thread Michael Ellerman
On Fri, 2015-11-06 at 12:52 -0800, Kees Cook wrote: > On Thu, Nov 5, 2015 at 10:44 AM, Daniel Cashman wrote: > > On 11/04/2015 10:30 AM, Daniel Cashman wrote: > > > On 11/3/15 3:21 PM, Kees Cook wrote: > > > > On Tue, Nov 3, 2015 at 3:14 PM, Daniel Cashman > > > > wrote: > > > > > On 11/03/2015

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-06 Thread Kees Cook
On Thu, Nov 5, 2015 at 10:44 AM, Daniel Cashman wrote: > On 11/04/2015 10:30 AM, Daniel Cashman wrote: >> On 11/3/15 3:21 PM, Kees Cook wrote: >>> On Tue, Nov 3, 2015 at 3:14 PM, Daniel Cashman wrote: On 11/03/2015 11:19 AM, Kees Cook wrote: > Do you have patches for x86 and arm64?

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-05 Thread Daniel Cashman
On 11/04/2015 10:30 AM, Daniel Cashman wrote: > On 11/3/15 3:21 PM, Kees Cook wrote: >> On Tue, Nov 3, 2015 at 3:14 PM, Daniel Cashman wrote: >>> On 11/03/2015 11:19 AM, Kees Cook wrote: Do you have patches for x86 and arm64? >>> >>> I was holding off on those until I could gauge upstream rec

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-04 Thread Daniel Cashman
On 11/3/15 3:21 PM, Kees Cook wrote: > On Tue, Nov 3, 2015 at 3:14 PM, Daniel Cashman wrote: >> On 11/03/2015 11:19 AM, Kees Cook wrote: >>> Do you have patches for x86 and arm64? >> >> I was holding off on those until I could gauge upstream reception. If >> desired, I could put those together an

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-04 Thread Daniel Cashman
On 11/3/15 3:18 PM, Kees Cook wrote: > On Tue, Nov 3, 2015 at 2:39 PM, Russell King - ARM Linux > wrote: >> On Tue, Nov 03, 2015 at 11:19:44AM -0800, Kees Cook wrote: >>> On Tue, Nov 3, 2015 at 10:10 AM, Daniel Cashman >>> wrote: From: dcashman arm: arch_mmap_rnd() uses a hard-co

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Kees Cook
On Tue, Nov 3, 2015 at 3:14 PM, Daniel Cashman wrote: > On 11/03/2015 11:19 AM, Kees Cook wrote: >> Do you have patches for x86 and arm64? > > I was holding off on those until I could gauge upstream reception. If > desired, I could put those together and add them as [PATCH 3/4] and > [PATCH 4/4].

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Kees Cook
On Tue, Nov 3, 2015 at 2:39 PM, Russell King - ARM Linux wrote: > On Tue, Nov 03, 2015 at 11:19:44AM -0800, Kees Cook wrote: >> On Tue, Nov 3, 2015 at 10:10 AM, Daniel Cashman wrote: >> > From: dcashman >> > >> > arm: arch_mmap_rnd() uses a hard-code value of 8 to generate the >> > random offset

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Daniel Cashman
On 11/03/2015 11:19 AM, Kees Cook wrote: > Do you have patches for x86 and arm64? I was holding off on those until I could gauge upstream reception. If desired, I could put those together and add them as [PATCH 3/4] and [PATCH 4/4]. Thank You, Dan -- To unsubscribe from this list: send the line

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Russell King - ARM Linux
On Tue, Nov 03, 2015 at 11:19:44AM -0800, Kees Cook wrote: > On Tue, Nov 3, 2015 at 10:10 AM, Daniel Cashman wrote: > > From: dcashman > > > > arm: arch_mmap_rnd() uses a hard-code value of 8 to generate the > > random offset for the mmap base address. This value represents a > > compromise betw

Re: [PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Kees Cook
On Tue, Nov 3, 2015 at 10:10 AM, Daniel Cashman wrote: > From: dcashman > > arm: arch_mmap_rnd() uses a hard-code value of 8 to generate the > random offset for the mmap base address. This value represents a > compromise between increased ASLR effectiveness and avoiding > address-space fragmenta

[PATCH v2 2/2] arm: mm: support ARCH_MMAP_RND_BITS.

2015-11-03 Thread Daniel Cashman
From: dcashman arm: arch_mmap_rnd() uses a hard-code value of 8 to generate the random offset for the mmap base address. This value represents a compromise between increased ASLR effectiveness and avoiding address-space fragmentation. Replace it with a Kconfig option, which is sensibly bounded,