Re: [Xen-devel] x86: PIE support and option to extend KASLR randomization

2017-10-06 Thread Pavel Machek
On Mon 2017-09-25 09:33:42, Ingo Molnar wrote: > > * Pavel Machek wrote: > > > > For example, there would be collision with regular user-space mappings, > > > right? > > > Can local unprivileged users use mmap(MAP_FIXED) probing to figure out

Re: [Xen-devel] x86: PIE support and option to extend KASLR randomization

2017-09-24 Thread Pavel Machek
Hi! > > We do need to consider how we want modules to fit into whatever model we > > choose, though. They can be adjacent, or we could go with a more > > traditional dynamic link model where the modules can be separate, and > > chained together with the main kernel via the GOT. > > So I believe

Re: [Xen-devel] [kernel-hardening] Re: x86: PIE support and option to extend KASLR randomization

2017-08-28 Thread Pavel Machek
Hi! > > + The kernel and modules will generate slightly more assembly (1 to > > 2% > > + increase on the .text sections). The vmlinux binary will be > > + significantly smaller due to less relocations. > > > > ... but describing a 1-2% kernel text size increase as "slightl

Re: [Xen-devel] [RFC v2 13/23] x86/power/64: Adapt assembly for PIE support

2017-08-11 Thread Pavel Machek
2G memory limit. > > Signed-off-by: Thomas Garnier Acked-by: Pavel Machek > --- a/arch/x86/power/hibernate_asm_64.S > +++ b/arch/x86/power/hibernate_asm_64.S > @@ -24,7 +24,7 @@ > #include > > ENTRY(swsusp_arch_suspend) > - movq$saved_context, %rax > + l

Re: [Xen-devel] [RFC 13/22] x86/power/64: Adapt assembly for PIE support

2017-07-19 Thread Pavel Machek
2G memory limit. > > Signed-off-by: Thomas Garnier Acked-by: Pavel Machek (But not tested; testing it would be nice). Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.c

Re: [Xen-devel] [PATCH v2 02/10] x86: assembly, FUNC_START for fn, DATA_START for data

2017-03-22 Thread Pavel Machek
On Wed 2017-03-22 13:06:54, Jiri Slaby wrote: > Hi, > > On 03/21/2017, 03:08 PM, Pavel Machek wrote: > >> -ENTRY(saved_rbp) .quad 0 > >> -ENTRY(saved_rsi) .quad 0 > >> -ENTRY(saved_rdi) .quad 0 > >> -ENTRY(saved_rbx) .quad 0 >

Re: [Xen-devel] [PATCH v2 02/10] x86: assembly, FUNC_START for fn, DATA_START for data

2017-03-21 Thread Pavel Machek
Hi! > -ENTRY(saved_rbp) .quad 0 > -ENTRY(saved_rsi) .quad 0 > -ENTRY(saved_rdi) .quad 0 > -ENTRY(saved_rbx) .quad 0 > +SYM_DATA_START(saved_rbp).quad 0 > +SYM_DATA_START(saved_rsi).quad 0 > +SYM_DATA_START(saved_rdi).quad 0 > +SYM_D

Re: [Xen-devel] [PATCH v7 3/3] x86: Make the GDT remapping read-only on 64-bit

2017-03-14 Thread Pavel Machek
On Tue 2017-03-14 10:05:08, Thomas Garnier wrote: > This patch makes the GDT remapped pages read-only to prevent corruption. > This change is done only on 64-bit. > > The native_load_tr_desc function was adapted to correctly handle a > read-only GDT. The LTR instruction always writes to the GDT TS