[d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

Vitaly Chikunov vt на altlinux.org
Чт Апр 11 21:02:27 MSK 2024


On Thu, Apr 11, 2024 at 08:47:55PM +0300, Alexandr Shashkin wrote:
> Если p9 и c9f2 поддерживаются, то там тоже отключена эта опция для un-def
> 5.10.y

Добавил в un-def/p9. c9f2, видимо, не ко мне.

> 
> 11.04.2024 19:27, Vitaly Chikunov пишет:
> > On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok at altlinux.org wrote:
> > > From: Alexandr Shashkin <dutyrok at altlinux.org>
> > > 
> > > Enable kernel address space layout randomization to prevent guest
> > > security exploits based on the location of kernel objects.
> > Полагаю, это для std-def/p10.
> > Applied, thanks.
> > 
> > > Signed-off-by: Alexandr Shashkin <dutyrok at altlinux.org>
> > > ---
> > >   config | 2 +-
> > >   1 file changed, 1 insertion(+), 1 deletion(-)
> > > 
> > > diff --git a/config b/config
> > > index 9bd005564e56..e5917be74550 100644
> > > --- a/config
> > > +++ b/config
> > > @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
> > >   # CONFIG_KEXEC_JUMP is not set
> > >   CONFIG_PHYSICAL_START=0x1000000
> > >   CONFIG_RELOCATABLE=y
> > > -# CONFIG_RANDOMIZE_BASE is not set
> > > +CONFIG_RANDOMIZE_BASE=y
> > >   CONFIG_PHYSICAL_ALIGN=0x1000000
> > >   CONFIG_HOTPLUG_CPU=y
> > >   # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
> > > -- 
> > > 2.33.8
> > > 
> > > _______________________________________________
> > > devel-kernel mailing list
> > > devel-kernel at lists.altlinux.org
> > > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> > _______________________________________________
> > devel-kernel mailing list
> > devel-kernel at lists.altlinux.org
> > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel at lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel


Подробная информация о списке рассылки devel-kernel