* [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y
@ 2024-04-11 11:03 dutyrok
2024-04-11 16:27 ` Vitaly Chikunov
0 siblings, 1 reply; 4+ messages in thread
From: dutyrok @ 2024-04-11 11:03 UTC (permalink / raw)
To: devel-kernel
From: Alexandr Shashkin <dutyrok@altlinux.org>
Enable kernel address space layout randomization to prevent guest
security exploits based on the location of kernel objects.
Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
---
config | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config b/config
index 9bd005564e56..e5917be74550 100644
--- a/config
+++ b/config
@@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
# CONFIG_KEXEC_JUMP is not set
CONFIG_PHYSICAL_START=0x1000000
CONFIG_RELOCATABLE=y
-# CONFIG_RANDOMIZE_BASE is not set
+CONFIG_RANDOMIZE_BASE=y
CONFIG_PHYSICAL_ALIGN=0x1000000
CONFIG_HOTPLUG_CPU=y
# CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
--
2.33.8
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y
2024-04-11 11:03 [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y dutyrok
@ 2024-04-11 16:27 ` Vitaly Chikunov
2024-04-11 17:47 ` Alexandr Shashkin
0 siblings, 1 reply; 4+ messages in thread
From: Vitaly Chikunov @ 2024-04-11 16:27 UTC (permalink / raw)
To: ALT Linux kernel packages development
On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
> From: Alexandr Shashkin <dutyrok@altlinux.org>
>
> Enable kernel address space layout randomization to prevent guest
> security exploits based on the location of kernel objects.
Полагаю, это для std-def/p10.
Applied, thanks.
>
> Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
> ---
> config | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/config b/config
> index 9bd005564e56..e5917be74550 100644
> --- a/config
> +++ b/config
> @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
> # CONFIG_KEXEC_JUMP is not set
> CONFIG_PHYSICAL_START=0x1000000
> CONFIG_RELOCATABLE=y
> -# CONFIG_RANDOMIZE_BASE is not set
> +CONFIG_RANDOMIZE_BASE=y
> CONFIG_PHYSICAL_ALIGN=0x1000000
> CONFIG_HOTPLUG_CPU=y
> # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
> --
> 2.33.8
>
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y
2024-04-11 16:27 ` Vitaly Chikunov
@ 2024-04-11 17:47 ` Alexandr Shashkin
2024-04-11 18:02 ` Vitaly Chikunov
0 siblings, 1 reply; 4+ messages in thread
From: Alexandr Shashkin @ 2024-04-11 17:47 UTC (permalink / raw)
To: devel-kernel
Если p9 и c9f2 поддерживаются, то там тоже отключена эта опция для
un-def 5.10.y
11.04.2024 19:27, Vitaly Chikunov пишет:
> On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
>> From: Alexandr Shashkin <dutyrok@altlinux.org>
>>
>> Enable kernel address space layout randomization to prevent guest
>> security exploits based on the location of kernel objects.
> Полагаю, это для std-def/p10.
> Applied, thanks.
>
>> Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
>> ---
>> config | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/config b/config
>> index 9bd005564e56..e5917be74550 100644
>> --- a/config
>> +++ b/config
>> @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
>> # CONFIG_KEXEC_JUMP is not set
>> CONFIG_PHYSICAL_START=0x1000000
>> CONFIG_RELOCATABLE=y
>> -# CONFIG_RANDOMIZE_BASE is not set
>> +CONFIG_RANDOMIZE_BASE=y
>> CONFIG_PHYSICAL_ALIGN=0x1000000
>> CONFIG_HOTPLUG_CPU=y
>> # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
>> --
>> 2.33.8
>>
>> _______________________________________________
>> devel-kernel mailing list
>> devel-kernel@lists.altlinux.org
>> https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y
2024-04-11 17:47 ` Alexandr Shashkin
@ 2024-04-11 18:02 ` Vitaly Chikunov
0 siblings, 0 replies; 4+ messages in thread
From: Vitaly Chikunov @ 2024-04-11 18:02 UTC (permalink / raw)
To: ALT Linux kernel packages development
On Thu, Apr 11, 2024 at 08:47:55PM +0300, Alexandr Shashkin wrote:
> Если p9 и c9f2 поддерживаются, то там тоже отключена эта опция для un-def
> 5.10.y
Добавил в un-def/p9. c9f2, видимо, не ко мне.
>
> 11.04.2024 19:27, Vitaly Chikunov пишет:
> > On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
> > > From: Alexandr Shashkin <dutyrok@altlinux.org>
> > >
> > > Enable kernel address space layout randomization to prevent guest
> > > security exploits based on the location of kernel objects.
> > Полагаю, это для std-def/p10.
> > Applied, thanks.
> >
> > > Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
> > > ---
> > > config | 2 +-
> > > 1 file changed, 1 insertion(+), 1 deletion(-)
> > >
> > > diff --git a/config b/config
> > > index 9bd005564e56..e5917be74550 100644
> > > --- a/config
> > > +++ b/config
> > > @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
> > > # CONFIG_KEXEC_JUMP is not set
> > > CONFIG_PHYSICAL_START=0x1000000
> > > CONFIG_RELOCATABLE=y
> > > -# CONFIG_RANDOMIZE_BASE is not set
> > > +CONFIG_RANDOMIZE_BASE=y
> > > CONFIG_PHYSICAL_ALIGN=0x1000000
> > > CONFIG_HOTPLUG_CPU=y
> > > # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
> > > --
> > > 2.33.8
> > >
> > > _______________________________________________
> > > devel-kernel mailing list
> > > devel-kernel@lists.altlinux.org
> > > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> > _______________________________________________
> > devel-kernel mailing list
> > devel-kernel@lists.altlinux.org
> > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2024-04-11 18:02 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-04-11 11:03 [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y dutyrok
2024-04-11 16:27 ` Vitaly Chikunov
2024-04-11 17:47 ` Alexandr Shashkin
2024-04-11 18:02 ` Vitaly Chikunov
ALT Linux kernel packages development
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel-kernel/0 devel-kernel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel-kernel devel-kernel/ http://lore.altlinux.org/devel-kernel \
devel-kernel@altlinux.org devel-kernel@altlinux.ru devel-kernel@altlinux.com
public-inbox-index devel-kernel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel-kernel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git