Re: [kernel-hardening] [PATCH 2/4] arm64: Reduce ELF_ET_DYN_BASE

2017-06-23 Thread Ard Biesheuvel
On 23 June 2017 at 14:02, Kees Cook wrote: > On Fri, Jun 23, 2017 at 6:52 AM, Kees Cook wrote: >> On Thu, Jun 22, 2017 at 11:57 PM, Ard Biesheuvel >> wrote: >>> Hi Kees, >>> >>> On 22 June 2017 at 18:06, Kees Cook wrote: Now that explicitly executed loaders are loaded in the mmap region, >

Re: [kernel-hardening] [PATCH 2/4] arm64: Reduce ELF_ET_DYN_BASE

2017-06-23 Thread Kees Cook
On Fri, Jun 23, 2017 at 6:52 AM, Kees Cook wrote: > On Thu, Jun 22, 2017 at 11:57 PM, Ard Biesheuvel > wrote: >> Hi Kees, >> >> On 22 June 2017 at 18:06, Kees Cook wrote: >>> Now that explicitly executed loaders are loaded in the mmap region, >>> position PIE binaries lower in the address space

Re: [kernel-hardening] [PATCH 2/4] arm64: Reduce ELF_ET_DYN_BASE

2017-06-23 Thread Kees Cook
On Thu, Jun 22, 2017 at 11:57 PM, Ard Biesheuvel wrote: > Hi Kees, > > On 22 June 2017 at 18:06, Kees Cook wrote: >> Now that explicitly executed loaders are loaded in the mmap region, >> position PIE binaries lower in the address space to avoid possible >> collisions with mmap or stack regions.

Re: [kernel-hardening] [PATCH 2/4] arm64: Reduce ELF_ET_DYN_BASE

2017-06-22 Thread Ard Biesheuvel
Hi Kees, On 22 June 2017 at 18:06, Kees Cook wrote: > Now that explicitly executed loaders are loaded in the mmap region, > position PIE binaries lower in the address space to avoid possible > collisions with mmap or stack regions. For 64-bit, align to 4GB to > allow runtimes to use the entire 32

[PATCH 2/4] arm64: Reduce ELF_ET_DYN_BASE

2017-06-22 Thread Kees Cook
Now that explicitly executed loaders are loaded in the mmap region, position PIE binaries lower in the address space to avoid possible collisions with mmap or stack regions. For 64-bit, align to 4GB to allow runtimes to use the entire 32-bit address space for 32-bit pointers. Signed-off-by: Kees C