All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mark Rutland <mark.rutland@arm.com>
To: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: "linux-arm-kernel@lists.infradead.org" 
	<linux-arm-kernel@lists.infradead.org>,
	kernel-hardening@lists.openwall.com,
	Will Deacon <will.deacon@arm.com>,
	Catalin Marinas <catalin.marinas@arm.com>,
	Leif Lindholm <leif.lindholm@linaro.org>,
	Kees Cook <keescook@chromium.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	Stuart Yoder <stuart.yoder@freescale.com>,
	Sharma Bhupesh <bhupesh.sharma@freescale.com>,
	Arnd Bergmann <arnd@arndb.de>,
	Marc Zyngier <marc.zyngier@arm.com>,
	Christoffer Dall <christoffer.dall@linaro.org>
Subject: Re: [PATCH v3 08/21] arm64: add support for module PLTs
Date: Fri, 22 Jan 2016 17:19:35 +0000	[thread overview]
Message-ID: <20160122171935.GF11645@leverpostej> (raw)
In-Reply-To: <CAKv+Gu-5uN9iZf00ABRmzgxW2QCM+rWkh12B981gP=mfhq8NGQ@mail.gmail.com>

On Fri, Jan 22, 2016 at 06:06:52PM +0100, Ard Biesheuvel wrote:
> On 22 January 2016 at 17:55, Mark Rutland <mark.rutland@arm.com> wrote:
> >> +static bool in_init(const struct module *mod, void *addr)
> >> +{
> >> +     return (u64)addr - (u64)mod->module_init < mod->init_size;
> >> +}
> >> +
> >> +u64 get_module_plt(struct module *mod, void *loc, u64 val)
> >> +{
> >> +     struct plt_entry entry = {
> >> +             cpu_to_le32(0x92800010 | (((~val      ) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2a00010 | ((( val >> 16) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2c00010 | ((( val >> 32) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xd61f0200)
> >> +     }, *plt;
> >
> > It would be nice if we could un-magic this, though I see that reusing
> > the existing insn or reloc_insn code is painful here.
> >
> 
> Well, I could #define PLT0 PLT1 PLT2 etc, and document them a bit
> better, but having all the instruction machinery for emitting the
> exact same instructions each time seems a bit overkill imo.

Well, almost the same (the target address does change after all).

I agree that this looks more complicated using the insn machinery, based
on local experimentation. Oh well...
 
> >> +     int i, *count;
> >> +
> >> +     if (in_init(mod, loc)) {
> >> +             plt = (struct plt_entry *)mod->arch.init_plt->sh_addr;
> >> +             count = &mod->arch.init_plt_count;
> >> +     } else {
> >> +             plt = (struct plt_entry *)mod->arch.core_plt->sh_addr;
> >> +             count = &mod->arch.core_plt_count;
> >> +     }
> >> +
> >> +     /* Look for an existing entry pointing to 'val' */
> >> +     for (i = 0; i < *count; i++)
> >> +             if (plt[i].mov0 == entry.mov0 &&
> >> +                 plt[i].mov1 == entry.mov1 &&
> >> +                 plt[i].mov2 == entry.mov2)
> >> +                     return (u64)&plt[i];
> >
> > I think that at the cost of redundantly comparing the br x16, you could
> > simplify this by comparing the whole struct, e.g.
> >
> >         for (i = 0; i < *count; i++)
> >                 if (plt[i] == entry)
> 
> You can use struct types in assignments, but not in comparisons,
> strangely enough

Ah, sorry for the noise.

> >> +     for (s = sechdrs + 1; s < sechdrs_end; ++s) {
> >
> > Could we have a comment as to why we skip the first Shdr? I recall it's
> > in some way special, but I can't recall why/how.
> >
> 
> I don't remember exactly, and some of this code originated on ia64 IIRC.
> Probably better to simply start from [0]

Ok.

> >> +             const Elf64_Rela *rels = (void *)ehdr + s->sh_offset;
> >> +             int numrels = s->sh_size / sizeof(Elf64_Rela);
> >> +             Elf64_Shdr *dstsec = sechdrs + s->sh_info;
> >> +
> >> +             if (s->sh_type != SHT_RELA)
> >> +                     continue;
> >
> > We only have RELA, and no REL?
> >
> 
> Nope.
> 
> arch/arm64/Kconfig:86:  select MODULES_USE_ELF_RELA

Evidently I didn't do enough background reading.

> As I said, this code will look different in the next version, but I
> will make sure to take your review points.

Cheers! :)

Mark.

WARNING: multiple messages have this Message-ID (diff)
From: mark.rutland@arm.com (Mark Rutland)
To: linux-arm-kernel@lists.infradead.org
Subject: [PATCH v3 08/21] arm64: add support for module PLTs
Date: Fri, 22 Jan 2016 17:19:35 +0000	[thread overview]
Message-ID: <20160122171935.GF11645@leverpostej> (raw)
In-Reply-To: <CAKv+Gu-5uN9iZf00ABRmzgxW2QCM+rWkh12B981gP=mfhq8NGQ@mail.gmail.com>

On Fri, Jan 22, 2016 at 06:06:52PM +0100, Ard Biesheuvel wrote:
> On 22 January 2016 at 17:55, Mark Rutland <mark.rutland@arm.com> wrote:
> >> +static bool in_init(const struct module *mod, void *addr)
> >> +{
> >> +     return (u64)addr - (u64)mod->module_init < mod->init_size;
> >> +}
> >> +
> >> +u64 get_module_plt(struct module *mod, void *loc, u64 val)
> >> +{
> >> +     struct plt_entry entry = {
> >> +             cpu_to_le32(0x92800010 | (((~val      ) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2a00010 | ((( val >> 16) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2c00010 | ((( val >> 32) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xd61f0200)
> >> +     }, *plt;
> >
> > It would be nice if we could un-magic this, though I see that reusing
> > the existing insn or reloc_insn code is painful here.
> >
> 
> Well, I could #define PLT0 PLT1 PLT2 etc, and document them a bit
> better, but having all the instruction machinery for emitting the
> exact same instructions each time seems a bit overkill imo.

Well, almost the same (the target address does change after all).

I agree that this looks more complicated using the insn machinery, based
on local experimentation. Oh well...
 
> >> +     int i, *count;
> >> +
> >> +     if (in_init(mod, loc)) {
> >> +             plt = (struct plt_entry *)mod->arch.init_plt->sh_addr;
> >> +             count = &mod->arch.init_plt_count;
> >> +     } else {
> >> +             plt = (struct plt_entry *)mod->arch.core_plt->sh_addr;
> >> +             count = &mod->arch.core_plt_count;
> >> +     }
> >> +
> >> +     /* Look for an existing entry pointing to 'val' */
> >> +     for (i = 0; i < *count; i++)
> >> +             if (plt[i].mov0 == entry.mov0 &&
> >> +                 plt[i].mov1 == entry.mov1 &&
> >> +                 plt[i].mov2 == entry.mov2)
> >> +                     return (u64)&plt[i];
> >
> > I think that at the cost of redundantly comparing the br x16, you could
> > simplify this by comparing the whole struct, e.g.
> >
> >         for (i = 0; i < *count; i++)
> >                 if (plt[i] == entry)
> 
> You can use struct types in assignments, but not in comparisons,
> strangely enough

Ah, sorry for the noise.

> >> +     for (s = sechdrs + 1; s < sechdrs_end; ++s) {
> >
> > Could we have a comment as to why we skip the first Shdr? I recall it's
> > in some way special, but I can't recall why/how.
> >
> 
> I don't remember exactly, and some of this code originated on ia64 IIRC.
> Probably better to simply start from [0]

Ok.

> >> +             const Elf64_Rela *rels = (void *)ehdr + s->sh_offset;
> >> +             int numrels = s->sh_size / sizeof(Elf64_Rela);
> >> +             Elf64_Shdr *dstsec = sechdrs + s->sh_info;
> >> +
> >> +             if (s->sh_type != SHT_RELA)
> >> +                     continue;
> >
> > We only have RELA, and no REL?
> >
> 
> Nope.
> 
> arch/arm64/Kconfig:86:  select MODULES_USE_ELF_RELA

Evidently I didn't do enough background reading.

> As I said, this code will look different in the next version, but I
> will make sure to take your review points.

Cheers! :)

Mark.

WARNING: multiple messages have this Message-ID (diff)
From: Mark Rutland <mark.rutland@arm.com>
To: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: "linux-arm-kernel@lists.infradead.org"
	<linux-arm-kernel@lists.infradead.org>,
	kernel-hardening@lists.openwall.com,
	Will Deacon <will.deacon@arm.com>,
	Catalin Marinas <catalin.marinas@arm.com>,
	Leif Lindholm <leif.lindholm@linaro.org>,
	Kees Cook <keescook@chromium.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	Stuart Yoder <stuart.yoder@freescale.com>,
	Sharma Bhupesh <bhupesh.sharma@freescale.com>,
	Arnd Bergmann <arnd@arndb.de>,
	Marc Zyngier <marc.zyngier@arm.com>,
	Christoffer Dall <christoffer.dall@linaro.org>
Subject: [kernel-hardening] Re: [PATCH v3 08/21] arm64: add support for module PLTs
Date: Fri, 22 Jan 2016 17:19:35 +0000	[thread overview]
Message-ID: <20160122171935.GF11645@leverpostej> (raw)
In-Reply-To: <CAKv+Gu-5uN9iZf00ABRmzgxW2QCM+rWkh12B981gP=mfhq8NGQ@mail.gmail.com>

On Fri, Jan 22, 2016 at 06:06:52PM +0100, Ard Biesheuvel wrote:
> On 22 January 2016 at 17:55, Mark Rutland <mark.rutland@arm.com> wrote:
> >> +static bool in_init(const struct module *mod, void *addr)
> >> +{
> >> +     return (u64)addr - (u64)mod->module_init < mod->init_size;
> >> +}
> >> +
> >> +u64 get_module_plt(struct module *mod, void *loc, u64 val)
> >> +{
> >> +     struct plt_entry entry = {
> >> +             cpu_to_le32(0x92800010 | (((~val      ) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2a00010 | ((( val >> 16) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xf2c00010 | ((( val >> 32) & 0xffff)) << 5),
> >> +             cpu_to_le32(0xd61f0200)
> >> +     }, *plt;
> >
> > It would be nice if we could un-magic this, though I see that reusing
> > the existing insn or reloc_insn code is painful here.
> >
> 
> Well, I could #define PLT0 PLT1 PLT2 etc, and document them a bit
> better, but having all the instruction machinery for emitting the
> exact same instructions each time seems a bit overkill imo.

Well, almost the same (the target address does change after all).

I agree that this looks more complicated using the insn machinery, based
on local experimentation. Oh well...
 
> >> +     int i, *count;
> >> +
> >> +     if (in_init(mod, loc)) {
> >> +             plt = (struct plt_entry *)mod->arch.init_plt->sh_addr;
> >> +             count = &mod->arch.init_plt_count;
> >> +     } else {
> >> +             plt = (struct plt_entry *)mod->arch.core_plt->sh_addr;
> >> +             count = &mod->arch.core_plt_count;
> >> +     }
> >> +
> >> +     /* Look for an existing entry pointing to 'val' */
> >> +     for (i = 0; i < *count; i++)
> >> +             if (plt[i].mov0 == entry.mov0 &&
> >> +                 plt[i].mov1 == entry.mov1 &&
> >> +                 plt[i].mov2 == entry.mov2)
> >> +                     return (u64)&plt[i];
> >
> > I think that at the cost of redundantly comparing the br x16, you could
> > simplify this by comparing the whole struct, e.g.
> >
> >         for (i = 0; i < *count; i++)
> >                 if (plt[i] == entry)
> 
> You can use struct types in assignments, but not in comparisons,
> strangely enough

Ah, sorry for the noise.

> >> +     for (s = sechdrs + 1; s < sechdrs_end; ++s) {
> >
> > Could we have a comment as to why we skip the first Shdr? I recall it's
> > in some way special, but I can't recall why/how.
> >
> 
> I don't remember exactly, and some of this code originated on ia64 IIRC.
> Probably better to simply start from [0]

Ok.

> >> +             const Elf64_Rela *rels = (void *)ehdr + s->sh_offset;
> >> +             int numrels = s->sh_size / sizeof(Elf64_Rela);
> >> +             Elf64_Shdr *dstsec = sechdrs + s->sh_info;
> >> +
> >> +             if (s->sh_type != SHT_RELA)
> >> +                     continue;
> >
> > We only have RELA, and no REL?
> >
> 
> Nope.
> 
> arch/arm64/Kconfig:86:  select MODULES_USE_ELF_RELA

Evidently I didn't do enough background reading.

> As I said, this code will look different in the next version, but I
> will make sure to take your review points.

Cheers! :)

Mark.

  reply	other threads:[~2016-01-22 17:20 UTC|newest]

Thread overview: 207+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-01-11 13:18 [PATCH v3 00/21] arm64: implement support for KASLR Ard Biesheuvel
2016-01-11 13:18 ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18 ` Ard Biesheuvel
2016-01-11 13:18 ` [PATCH v3 01/21] of/fdt: make memblock minimum physical address arch configurable Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-11 13:18 ` [PATCH v3 02/21] arm64: introduce KIMAGE_VADDR as the virtual base of the kernel region Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-11 16:31   ` Mark Rutland
2016-01-11 16:31     ` [kernel-hardening] " Mark Rutland
2016-01-11 16:31     ` Mark Rutland
2016-01-11 13:18 ` [PATCH v3 03/21] arm64: pgtable: add dummy pud_index() and pmd_index() definitions Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-11 17:40   ` Mark Rutland
2016-01-11 17:40     ` [kernel-hardening] " Mark Rutland
2016-01-11 17:40     ` Mark Rutland
2016-01-12 17:25     ` Ard Biesheuvel
2016-01-12 17:25       ` [kernel-hardening] " Ard Biesheuvel
2016-01-12 17:25       ` Ard Biesheuvel
2016-01-11 13:18 ` [PATCH v3 04/21] arm64: decouple early fixmap init from linear mapping Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-11 16:09   ` Mark Rutland
2016-01-11 16:09     ` [kernel-hardening] " Mark Rutland
2016-01-11 16:09     ` Mark Rutland
2016-01-11 16:15     ` Ard Biesheuvel
2016-01-11 16:15       ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 16:15       ` Ard Biesheuvel
2016-01-11 16:27       ` Mark Rutland
2016-01-11 16:27         ` [kernel-hardening] " Mark Rutland
2016-01-11 16:27         ` Mark Rutland
2016-01-11 16:51         ` Mark Rutland
2016-01-11 16:51           ` [kernel-hardening] " Mark Rutland
2016-01-11 16:51           ` Mark Rutland
2016-01-11 17:08           ` Ard Biesheuvel
2016-01-11 17:08             ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 17:08             ` Ard Biesheuvel
2016-01-11 17:15             ` Ard Biesheuvel
2016-01-11 17:15               ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 17:15               ` Ard Biesheuvel
2016-01-11 17:21               ` Mark Rutland
2016-01-11 17:21                 ` [kernel-hardening] " Mark Rutland
2016-01-11 17:21                 ` Mark Rutland
2016-01-11 13:18 ` [PATCH v3 05/21] arm64: kvm: deal with kernel symbols outside of " Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-12 12:36   ` Mark Rutland
2016-01-12 12:36     ` [kernel-hardening] " Mark Rutland
2016-01-12 12:36     ` Mark Rutland
2016-01-12 13:23     ` Ard Biesheuvel
2016-01-12 13:23       ` [kernel-hardening] " Ard Biesheuvel
2016-01-12 13:23       ` Ard Biesheuvel
2016-01-11 13:18 ` [PATCH v3 06/21] arm64: pgtable: implement static [pte|pmd|pud]_offset variants Ard Biesheuvel
2016-01-11 13:18   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:18   ` Ard Biesheuvel
2016-01-11 16:24   ` Mark Rutland
2016-01-11 16:24     ` [kernel-hardening] " Mark Rutland
2016-01-11 16:24     ` Mark Rutland
2016-01-11 17:28     ` Ard Biesheuvel
2016-01-11 17:28       ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 17:28       ` Ard Biesheuvel
2016-01-11 17:31       ` Mark Rutland
2016-01-11 17:31         ` [kernel-hardening] " Mark Rutland
2016-01-11 17:31         ` Mark Rutland
2016-01-11 13:19 ` [PATCH v3 07/21] arm64: move kernel image to base of vmalloc area Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-12 18:14   ` Mark Rutland
2016-01-12 18:14     ` [kernel-hardening] " Mark Rutland
2016-01-12 18:14     ` Mark Rutland
2016-01-13  8:39     ` Ard Biesheuvel
2016-01-13  8:39       ` [kernel-hardening] " Ard Biesheuvel
2016-01-13  8:39       ` Ard Biesheuvel
2016-01-13  9:58       ` Ard Biesheuvel
2016-01-13  9:58         ` [kernel-hardening] " Ard Biesheuvel
2016-01-13  9:58         ` Ard Biesheuvel
2016-01-13 11:11         ` Mark Rutland
2016-01-13 11:11           ` [kernel-hardening] " Mark Rutland
2016-01-13 11:11           ` Mark Rutland
2016-01-13 11:14           ` Ard Biesheuvel
2016-01-13 11:14             ` [kernel-hardening] " Ard Biesheuvel
2016-01-13 11:14             ` Ard Biesheuvel
2016-01-13 13:51       ` Mark Rutland
2016-01-13 13:51         ` [kernel-hardening] " Mark Rutland
2016-01-13 13:51         ` Mark Rutland
2016-01-13 15:50         ` Ard Biesheuvel
2016-01-13 15:50           ` [kernel-hardening] " Ard Biesheuvel
2016-01-13 15:50           ` Ard Biesheuvel
2016-01-13 16:26           ` Mark Rutland
2016-01-13 16:26             ` [kernel-hardening] " Mark Rutland
2016-01-13 16:26             ` Mark Rutland
2016-01-14 18:57         ` Mark Rutland
2016-01-14 18:57           ` [kernel-hardening] " Mark Rutland
2016-01-14 18:57           ` Mark Rutland
2016-01-15  9:54           ` Ard Biesheuvel
2016-01-15  9:54             ` [kernel-hardening] " Ard Biesheuvel
2016-01-15  9:54             ` Ard Biesheuvel
2016-01-15 11:23             ` Mark Rutland
2016-01-15 11:23               ` [kernel-hardening] " Mark Rutland
2016-01-15 11:23               ` Mark Rutland
2016-01-27 14:31               ` Ard Biesheuvel
2016-01-27 14:31                 ` [kernel-hardening] " Ard Biesheuvel
2016-01-27 14:31                 ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 08/21] arm64: add support for module PLTs Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-22 16:55   ` Mark Rutland
2016-01-22 16:55     ` [kernel-hardening] " Mark Rutland
2016-01-22 16:55     ` Mark Rutland
2016-01-22 17:06     ` Ard Biesheuvel
2016-01-22 17:06       ` [kernel-hardening] " Ard Biesheuvel
2016-01-22 17:06       ` Ard Biesheuvel
2016-01-22 17:19       ` Mark Rutland [this message]
2016-01-22 17:19         ` [kernel-hardening] " Mark Rutland
2016-01-22 17:19         ` Mark Rutland
2016-01-11 13:19 ` [PATCH v3 09/21] extable: add support for relative extables to search and sort routines Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 10/21] arm64: switch to relative exception tables Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 11/21] arm64: avoid R_AARCH64_ABS64 relocations for Image header fields Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-13 18:12   ` Mark Rutland
2016-01-13 18:12     ` [kernel-hardening] " Mark Rutland
2016-01-13 18:12     ` Mark Rutland
2016-01-13 18:48     ` Ard Biesheuvel
2016-01-13 18:48       ` [kernel-hardening] " Ard Biesheuvel
2016-01-13 18:48       ` Ard Biesheuvel
2016-01-14  8:51       ` Ard Biesheuvel
2016-01-14  8:51         ` [kernel-hardening] " Ard Biesheuvel
2016-01-14  8:51         ` Ard Biesheuvel
2016-01-14  9:05         ` Ard Biesheuvel
2016-01-14  9:05           ` [kernel-hardening] " Ard Biesheuvel
2016-01-14  9:05           ` Ard Biesheuvel
2016-01-14 10:46           ` Mark Rutland
2016-01-14 10:46             ` [kernel-hardening] " Mark Rutland
2016-01-14 10:46             ` Mark Rutland
2016-01-14 11:22             ` Ard Biesheuvel
2016-01-14 11:22               ` [kernel-hardening] " Ard Biesheuvel
2016-01-14 11:22               ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 12/21] arm64: avoid dynamic relocations in early boot code Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-14 17:09   ` Mark Rutland
2016-01-14 17:09     ` [kernel-hardening] " Mark Rutland
2016-01-14 17:09     ` Mark Rutland
2016-01-11 13:19 ` [PATCH v3 13/21] arm64: allow kernel Image to be loaded anywhere in physical memory Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 14/21] arm64: redefine SWAPPER_TABLE_SHIFT for use in asm code Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 14/21] arm64: [re]define SWAPPER_TABLE_[SHIFT|SIZE] " Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:26   ` Ard Biesheuvel
2016-01-11 13:26     ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:26     ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 15/21] arm64: split elf relocs into a separate header Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 16/21] scripts/sortextable: add support for ET_DYN binaries Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 17/21] arm64: add support for a relocatable kernel and KASLR Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 18/21] efi: stub: implement efi_get_random_bytes() based on EFI_RNG_PROTOCOL Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-21 15:42   ` Matt Fleming
2016-01-21 15:42     ` [kernel-hardening] " Matt Fleming
2016-01-21 15:42     ` Matt Fleming
2016-01-21 16:12     ` Ard Biesheuvel
2016-01-21 16:12       ` [kernel-hardening] " Ard Biesheuvel
2016-01-21 16:12       ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 19/21] efi: stub: add implementation of efi_random_alloc() Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-21 16:10   ` Matt Fleming
2016-01-21 16:10     ` [kernel-hardening] " Matt Fleming
2016-01-21 16:10     ` Matt Fleming
2016-01-21 16:16     ` Ard Biesheuvel
2016-01-21 16:16       ` [kernel-hardening] " Ard Biesheuvel
2016-01-21 16:16       ` Ard Biesheuvel
2016-01-11 13:19 ` [PATCH v3 20/21] efi: stub: use high allocation for converted command line Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-21 16:20   ` Matt Fleming
2016-01-21 16:20     ` [kernel-hardening] " Matt Fleming
2016-01-21 16:20     ` Matt Fleming
2016-01-11 13:19 ` [PATCH v3 21/21] arm64: efi: invoke EFI_RNG_PROTOCOL to supply KASLR randomness Ard Biesheuvel
2016-01-11 13:19   ` [kernel-hardening] " Ard Biesheuvel
2016-01-11 13:19   ` Ard Biesheuvel
2016-01-21 16:31   ` Matt Fleming
2016-01-21 16:31     ` [kernel-hardening] " Matt Fleming
2016-01-21 16:31     ` Matt Fleming
2016-01-11 22:07 ` [PATCH v3 00/21] arm64: implement support for KASLR Kees Cook
2016-01-11 22:07   ` [kernel-hardening] " Kees Cook
2016-01-11 22:07   ` Kees Cook
2016-01-12  7:17   ` Ard Biesheuvel
2016-01-12  7:17     ` [kernel-hardening] " Ard Biesheuvel
2016-01-12  7:17     ` Ard Biesheuvel

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160122171935.GF11645@leverpostej \
    --to=mark.rutland@arm.com \
    --cc=ard.biesheuvel@linaro.org \
    --cc=arnd@arndb.de \
    --cc=bhupesh.sharma@freescale.com \
    --cc=catalin.marinas@arm.com \
    --cc=christoffer.dall@linaro.org \
    --cc=keescook@chromium.org \
    --cc=kernel-hardening@lists.openwall.com \
    --cc=leif.lindholm@linaro.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=marc.zyngier@arm.com \
    --cc=stuart.yoder@freescale.com \
    --cc=will.deacon@arm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.