Re: [kernel-hardening] non-x86 per-task stack canaries

2017-06-27 Thread Mark Rutland
On Mon, Jun 26, 2017 at 06:52:31PM -0400, Daniel Micay wrote: > On Mon, 2017-06-26 at 14:04 -0700, Kees Cook wrote: > > Hi, > > > > The stack protector functionality on x86_64 uses %gs:0x28 (%gs is the > > percpu area) for __stack_chk_guard, and all other architectures use a > > global variable in

Re: [kernel-hardening] non-x86 per-task stack canaries

2017-06-26 Thread Daniel Micay
On Mon, 2017-06-26 at 14:04 -0700, Kees Cook wrote: > Hi, > > The stack protector functionality on x86_64 uses %gs:0x28 (%gs is the > percpu area) for __stack_chk_guard, and all other architectures use a > global variable instead. This means we never change the stack canary > on non-x86 architectu