Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 5 Jan 2017 11:00:20 -0800
From: Thomas Garnier <>
To: Arjan van de Ven <>
Cc: Ingo Molnar <>, Thomas Gleixner <>, Ingo Molnar <>, 
	"H . Peter Anvin" <>, Kees Cook <>, Borislav Petkov <>, 
	Andy Lutomirski <>, Dave Hansen <>, Chen Yucong <>, 
	Paul Gortmaker <>, Andrew Morton <>, 
	Masahiro Yamada <>, 
	Sebastian Andrzej Siewior <>, Anna-Maria Gleixner <>, 
	Boris Ostrovsky <>, Rasmus Villemoes <>, 
	Michael Ellerman <>, Juergen Gross <>, 
	Richard Weinberger <>, "the arch/x86 maintainers" <>, LKML <>, 
	Kernel Hardening <>, 
	Linus Torvalds <>, Peter Zijlstra <>
Subject: Re: [RFC] x86/mm/KASLR: Remap GDTs at fixed location

On Thu, Jan 5, 2017 at 10:56 AM, Arjan van de Ven <> wrote:
> On 1/5/2017 8:40 AM, Thomas Garnier wrote:
>> Well, it happens only when KASLR memory randomization is enabled. Do
>> you think it should have a separate config option?
> no I would want it a runtime option.... "sgdt from ring 3" is going away
> with UMIP (and is already possibly gone in virtual machines, see
> and for those cases it would be a shame
> to lose the randomization

That's correct. When UMIP is enabled, we should disable fixed location
for both GDT and IDT. Glad to do that when UMIP support is added.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.