[PATCH] arm64: Kconfig RANDOMIZE_MODULE_REGION_FULL correction
Ross Meikleham
rossmeikleham at gmail.com
Sat Nov 7 09:31:19 EST 2020
In the 5.1.5 Kernel RANDOMIZE_MODULE_REGION_FULL was a 4GB window,
however this was changed to 2GB from 5.1.6
(see /arch/arm64/kernel/kaslr.c). This updates the
config description for RANDOMIZE_MODULE_REGION_FULL in /arch/arm64/Kconfig
to reflect this.
Signed-off-by: Ross Meikleham <RossMeikleham at gmail.com>
---
arch/arm64/Kconfig | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
index 6d232837cbee..b8fd2c590057 100644
--- a/arch/arm64/Kconfig
+++ b/arch/arm64/Kconfig
@@ -1782,11 +1782,11 @@ config RANDOMIZE_BASE
If unsure, say N.
config RANDOMIZE_MODULE_REGION_FULL
- bool "Randomize the module region over a 4 GB range"
+ bool "Randomize the module region over a 2 GB range"
depends on RANDOMIZE_BASE
default y
help
- Randomizes the location of the module region inside a 4 GB window
+ Randomizes the location of the module region inside a 2 GB window
covering the core kernel. This way, it is less likely for modules
to leak information about the location of core kernel data structures
but it does imply that function calls between modules and the core
--
2.18.0
More information about the linux-arm-kernel
mailing list