From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753333AbdK1AD7 (ORCPT ); Mon, 27 Nov 2017 19:03:59 -0500 Received: from mail-it0-f67.google.com ([209.85.214.67]:39346 "EHLO mail-it0-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752162AbdK1AD5 (ORCPT ); Mon, 27 Nov 2017 19:03:57 -0500 X-Google-Smtp-Source: AGs4zMb3AAWn63vDc6TScmmwU5pwBHOQdmKnAbOb7GnaC7WgHGI8M8c92qKqvlTDi8/+U+WpM0eb9wZW6IfexakBbik= MIME-Version: 1.0 In-Reply-To: <1511826058-2563-1-git-send-email-me@tobin.cc> References: <1511826058-2563-1-git-send-email-me@tobin.cc> From: Linus Torvalds Date: Mon, 27 Nov 2017 16:03:56 -0800 X-Google-Sender-Auth: aFBDY1upwdD0DRsUPjKLcCk-GF0 Message-ID: Subject: Re: [PATCH 0/5] add printk specifier %px, unique identifier To: "Tobin C. Harding" Cc: "Jason A. Donenfeld" , "Theodore Ts'o" , Kees Cook , Paolo Bonzini , Tycho Andersen , "Roberts, William C" , Tejun Heo , Jordan Glover , Greg KH , Petr Mladek , Joe Perches , Ian Campbell , Sergey Senozhatsky , Catalin Marinas , Will Deacon , Steven Rostedt , Chris Fries , Dave Weinstein , Daniel Micay , Djalal Harouni , =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= , Linux Kernel Mailing List , KVM list , "kernel-hardening@lists.openwall.com" Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Nov 27, 2017 at 3:40 PM, Tobin C. Harding wrote: > Finally, with this patch set in place, we have the added benefit that > newbies (me) can quietly go around the kernel 'sweeping up' after > leaking addresses. This as apposed to using a hammer and hashing all > %p. And if this is deemed too little and too slow we can always search > and replace '%p' with '%px'. So the big remaining ones for me are the /proc//stack (stack pointers) and the /proc/net/* ones. I'm a bit disappointed that those haven't been fixed already and aren't even in this series.. Since I was the proponent of the whole "leaking_addresses" script model, I guess I can't complain when %p isn't then just made to hash everything, but it does feel like this has been dragging out a bit.. Linus