Date: Tue, 29 Mar 2016 18:25:26 -0500 From: Linus Torvalds <torvalds@...ux-foundation.org> To: Scotty Bauer <sbauer@....utah.edu> Cc: Linux Kernel Mailing List <linux-kernel@...r.kernel.org>, "kernel-hardening@...ts.openwall.com" <kernel-hardening@...ts.openwall.com>, "the arch/x86 maintainers" <x86@...nel.org>, Andi Kleen <ak@...ux.intel.com>, Andy Lutomirski <luto@...capital.net>, Ingo Molnar <mingo@...hat.com>, Thomas Gleixner <tglx@...utronix.de>, wmealing@...hat.com Subject: Re: [PATCH v4 0/4] SROP Mitigation: Sigreturn Cookies On Tue, Mar 29, 2016 at 6:11 PM, Scotty Bauer <sbauer@....utah.edu> wrote: > > Yeah I had toyed with using hashes, I used hash_64 not md5 which is like 14 > extra instructions or something. That sounds fine. Anything that requires enough code to undo that it kind of defeats the purpose of a SROP should be enough. It's not about encryption, I'd just think that if you can force the buffer overflow while already in a signal handler, you'd want something that is at least *slightly* harder to defeat than a single "xor" instruction. > It's not hard to implement So I can try it. When you say an extra hardening > mode do you mean hide it behind a sysctl or some sort of compile time CONFIG? Since there already is a sysctl, I'd just assume that. The important part is that the *default* value for that sysctl can't break real applications. I don't really count CRIU as a real app, if only because once you start doing checkpoint-restore you are going to do some amount of system maintenance anyway, so somebody doing CRIU is kind of expected to have a certain amount of system expertise, I would say. But dosemu - or Wine - is very much something that "normal people" run - people who we do *not* expect to have to know about new sysctl's etc. They already have one (mmap at zero), but that is very directly related to what vm86 mode and Wine does, and people have had time to learn about it. Let's not add another. So testing dosemu and wine would be good. I wonder what else has shown issues with signal stack layout changes. Debuggers and some JIT engines, I suspect. Linus
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.