Re: [ARM ATTEND] catching up on exploit mitigations

2013-08-26 Thread Laura Abbott
On 8/26/2013 12:56 PM, Mark Brown wrote: On Mon, Aug 12, 2013 at 09:51:59PM -0700, Laura Abbott wrote: On 7/30/2013 12:05 PM, Kees Cook wrote: - RO and W^X kernel page table protections (similar to x86's DEBUG_RODATA and DEBUG_SET_MODULE_RONX; it's not clear to me how much LPAE and PXN is alr

Re: [ARM ATTEND] catching up on exploit mitigations

2013-08-26 Thread Mark Brown
On Mon, Aug 12, 2013 at 09:51:59PM -0700, Laura Abbott wrote: > On 7/30/2013 12:05 PM, Kees Cook wrote: > >- RO and W^X kernel page table protections (similar to x86's > >DEBUG_RODATA and DEBUG_SET_MODULE_RONX; it's not clear to me how much > >LPAE and PXN is already handling this, if at all) > W

Re: [ARM ATTEND] catching up on exploit mitigations

2013-08-12 Thread Laura Abbott
On 7/30/2013 12:05 PM, Kees Cook wrote: I'd like to propose the topic of catching up to x86 exploit mitigations and security features, and potentially identifying ARM-unique mitigations/features that could be implemented. Several years ago, with Nicolas Pitre doing all the real work, I coordinate