[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110812095219.GA3012@albatros>
Date: Fri, 12 Aug 2011 13:52:19 +0400
From: Vasiliy Kulikov <segoon@...nwall.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: base address for shared libs
On Fri, Aug 12, 2011 at 13:20 +0400, Solar Designer wrote:
> > bottom up.
>
> Huh? I don't think you used the right words here.
There are 2 allocation logics, top down and bottom up:
http://lxr.free-electrons.com/source/mm/mmap.c#L1372
http://lxr.free-electrons.com/source/mm/mmap.c#L1444
If use top down logic (start from 0x01000000 as the end of the library)
then some gap at 0x00110000 will be wasted. With bottom up logic I'll
simply have the last library partly being in ASCII-armor zone, the end
of it will be located after 0x01000000, but no waste of vm space.
Or you mean anything else?
> > For Owl we want to make entropy size configurable. Depending on the
> > entropy, use ASCII-armor or fallback to the default allocator
> > instantly.
>
> Not exactly. Both for upstream and for Owl, when the entropy size
> exceeds what we can provide ASCII-armor for, we start at 0x110000
> anyway, but we just happen to go to non-armored addresses if we get such
> random numbers. For example, if we're configured to use 12 bits and our
> binary uses just one library of 3 MB in size, then there's an approx.
> 75% chance that on a given invocation of the binary we have ASCII armor
> for the library anyway. This is just not guaranteed.
OK. However, I don't see much sense in sizes between 10 and 16. If we
want to use ASCII-armor or warried about vm-hungry apps, then use 10
bits. If not, use all power of ASLR.
But if use distros with their default 12 bits in containers, it makes
sense to protect them with a probabilistic measure, though.
Thanks,
--
Vasiliy
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
