From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Garnier Subject: Re: x86: PIE support and option to extend KASLR randomization Date: Thu, 21 Sep 2017 14:16:43 -0700 Message-ID: References: <20170815075609.mmzbfwritjzvrpsn@gmail.com> <20170816151235.oamkdva6cwpc4cex@gmail.com> <20170817080920.5ljlkktngw2cisfg@gmail.com> <20170825080443.tvvr6wzs362cjcuu@gmail.com> <20170921155919.skpyt7dutod5ul4t@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dv8q0-000576-4l for xen-devel@lists.xenproject.org; Thu, 21 Sep 2017 21:16:48 +0000 Received: by mail-it0-f52.google.com with SMTP id g18so1743465itg.5 for ; Thu, 21 Sep 2017 14:16:46 -0700 (PDT) In-Reply-To: <20170921155919.skpyt7dutod5ul4t@gmail.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: Ingo Molnar Cc: Nicolas Pitre , Peter Zijlstra , Michal Hocko , kvm list , =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= , Peter Zijlstra , Catalin Marinas , Christopher Li , Alexei Starovoitov , David Howells , Paul Gortmaker , Pavel Machek , "H . Peter Anvin" , Kernel Hardening , Christoph Lameter , Thomas Gleixner , Kees Cook , the arch/x86 maintainers , Herbert Xu , Daniel Borkmann , Matthew Wilcox , Peter Foley , Joerg List-Id: xen-devel@lists.xenproject.org T24gVGh1LCBTZXAgMjEsIDIwMTcgYXQgODo1OSBBTSwgSW5nbyBNb2xuYXIgPG1pbmdvQGtlcm5l bC5vcmc+IHdyb3RlOgo+Cj4gKCBTb3JyeSBhYm91dCB0aGUgZGVsYXkgaW4gYW5zd2VyaW5nIHRo aXMuIEkgY291bGQgYmxhbWUgdGhlIGRlbGF5IG9uIHRoZSBtZXJnZQo+ICAgd2luZG93LCBidXQg aW4gcmVhbGl0eSBJJ3ZlIGJlZW4gcHJvY3Jhc3RpbmF0aW5nIHRoaXMgaXMgZHVlIHRvIHRoZSBw ZXJtYW5lbnQsCj4gICBub24tdHJpdmlhbCBpbXBhY3QgUElFIGhhcyBvbiBnZW5lcmF0ZWQgQyBj b2RlLiApCj4KPiAqIFRob21hcyBHYXJuaWVyIDx0aGdhcm5pZUBnb29nbGUuY29tPiB3cm90ZToK Pgo+PiAxKSBQSUUgc29tZXRpbWUgbmVlZHMgdHdvIGluc3RydWN0aW9ucyB0byByZXByZXNlbnQg YSBzaW5nbGUKPj4gaW5zdHJ1Y3Rpb24gb24gbWNtb2RlbD1rZXJuZWwuCj4KPiBXaGF0IGFnYWlu IGlzIHRoZSB0eXBpY2FsIGZyZXF1ZW5jeSBvZiB0aGlzIG9jY3VycmluZyBpbiBhbiB4ODYtNjQg ZGVmY29uZmlnCj4ga2VybmVsLCB3aXRoIHRoZSB2ZXJ5IGxhdGVzdCBHQ0M/CgpJIGFtIG5vdCBz dXJlIHdoYXQgaXMgdGhlIGJlc3Qgd2F5IHRvIG1lYXN1cmUgdGhhdC4KCj4KPiBBbHNvLCB0byBt YWtlIHN1cmU6IHdoaWNoIHVud2luZGVyIGRpZCB5b3UgdXNlIGZvciB5b3VyIG1lYXN1cmVtZW50 cywKPiBmcmFtZS1wb2ludGVycyBvciBPUkM/IFBsZWFzZSB1c2UgT1JDIG9ubHkgZm9yIGZ1dHVy ZSBudW1iZXJzLCBhcwo+IGZyYW1lLXBvaW50ZXJzIGlzIG9ic29sZXRlIGZyb20gYSBwZXJmb3Jt YW5jZSBtZWFzdXJlbWVudCBQT1YuCgpJIHVzZWQgdGhlIGRlZmF1bHQgY29uZmlndXJhdGlvbiB3 aGljaCB1c2VzIGZyYW1lLXBvaW50ZXIuIEkgYnVpbHQgYWxsCnRoZSBkaWZmZXJlbnQgYmluYXJp ZXMgd2l0aCBPUkMgYW5kIEkgc2VlIGFuIGltcHJvdmVtZW50IGluIHNpemU6CgpPbiBsYXRlc3Qg cmV2aXNpb24gKGp1c3QgYnVpbHQgYW5kIHJhbiBwZXJmb3JtYW5jZSB0ZXN0cyB0aGlzIHdlZWsp OgoKV2l0aCBmcmFtZXBvaW50ZXI6IFBJRSAudGV4dCBpcyAwLjgzNzMyNCUgdGhhbiBiYXNlbGlu ZQoKV2l0aCBPUkM6IFBJRSAudGV4dCBpcyAwLjgxNDIyNCUgdGhhbiBiYXNlbGluZQoKQ29tcGFy aW5nIGJhc2VsaW5lcyBvbmx5LCBPUkMgaXMgLTIuODQ5ODMyJSB0aGFuIGZyYW1lLXBvaW50ZXJz LgoKPgo+PiAyKSBHQ0MgZG9lcyBub3Qgb3B0aW1pemUgc3dpdGNoZXMgaW4gUElFIGluIG9yZGVy IHRvIHJlZHVjZSByZWxvY2F0aW9uczoKPgo+IEhvcGVmdWxseSB0aGlzIGNhbiBlaXRoZXIgYmUg Zml4ZWQgaW4gR0NDIG9yIGF0IGxlYXN0IGluZmx1ZW5jZWQgdmlhIGEgY29tcGlsZXIKPiBzd2l0 Y2ggaW4gdGhlIGZ1dHVyZS4KPgo+PiBUaGUgc3dpdGNoZXMgYXJlIHRoZSBiaWdnZXN0IGluY3Jl YXNlIG9uIHNtYWxsIGZ1bmN0aW9ucyBidXQgSSBkb24ndAo+PiB0aGluayB0aGV5IHJlcHJlc2Vu dCBhIGxhcmdlIHBvcnRpb24gb2YgdGhlIGRpZmZlcmVuY2UgKG51bWJlciAxIGlzKS4KPgo+IE9r Lgo+Cj4+IEEgc2lkZSBub3RlLCB3aGlsZSB0ZXN0aW5nIGdjYyA3LjIuMCBvbiBoYWNrYmVuY2gg SSBoYXZlIHNlZW4gdGhlIFBJRQo+PiBrZXJuZWwgYmVpbmcgZmFzdGVyIGJ5IDElIGFjcm9zcyBt dWx0aXBsZSBydW5zIChjb21wYXJpbmcgNTAgcnVucyBkb25lCj4+IGFjcm9zcyA1IHJlYm9vdHMg dHdpY2UpLiBJIGRvbid0IHRoaW5rIFBJRSBpcyBmYXN0ZXIgdGhhbiBhCj4+IG1jbW9kZWw9a2Vy bmVsIGJ1dCByZWNlbnQgdmVyc2lvbnMgb2YgZ2NjIG1ha2VzIHRoZW0gZmFpcmx5IHNpbWlsYXIu Cj4KPiBTbyBJIHRoaW5rIHdlIGFyZSBkb3duIHRvIGFuIG92ZXJoZWFkIHJhbmdlIHdoZXJlIHRo ZSBpbmhlcmVudCBub2lzZSAoYm90aCByYW5kb20KPiBhbmQgc3lzdGVtYXRpYyBvbmUpIGluICdo YWNrYmVuY2gnIG92ZXJ3aGVsbXMgdGhlIHNpZ25hbCB3ZSBhcmUgdHJ5aW5nIHRvIG1lYXN1cmUu Cj4KPiBTbyBJIHRoaW5rIGl0J3MgdGhlIGtlcm5lbCAudGV4dCBzaXplIGNoYW5nZSB0aGF0IGlz IHRoZSBiZXN0IG5vaXNlLWZyZWUgcHJveHkgZm9yCj4gdGhlIG92ZXJoZWFkIGltcGFjdCBvZiBQ SUUuCgpJIGFncmVlIGJ1dCBpdCBtaWdodCBiZSBoYXJkIHRvIG1lYXN1cmUgdGhlIGV4YWN0IGlt cGFjdC4gV2hhdCBpcwphY2NlcHRhYmxlIGFuZCB3aGF0IGlzIG5vdD8KCj4KPiBJdCBkb2Vzbid0 IGh1cnQgdG8gZG91YmxlIGNoZWNrIGFjdHVhbCByZWFsIHBlcmZvcm1hbmNlIGFzIHdlbGwsIGp1 c3QgZG9uJ3QgZXhwZWN0Cj4gdGhlcmUgdG8gYmUgbXVjaCBvZiBhIHNpZ25hbCBmb3IgYW55dGhp bmcgYnV0IGZ1bGx5IGNhY2hlZCBtaWNyb2JlbmNobWFyawo+IHdvcmtsb2Fkcy4KClRoYXQncyBh bGlnbmVkIHdpdGggd2hhdCBJIHNlZSBpbiB0aGUgbGF0ZXN0IHBlcmZvcm1hbmNlIHRlc3Rpbmcu ClBlcmZvcm1hbmNlIGlzIGNsb3NlIGVub3VnaCB0aGF0IGl0IGlzIGhhcmQgdG8gZ2V0IGV4YWN0 IG51bWJlcnMgKHBpZQppcyBqdXN0IGEgYml0IHNsb3dlciB0aGFuIGJhc2VsaW5lIG9uIGhhY2tl bmNoICh+MSUpKS4KCj4KPiBUaGFua3MsCj4KPiAgICAgICAgIEluZ28KCgoKLS0gClRob21hcwoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3RzLnhlbi5v cmcveGVuLWRldmVsCg==