On Fri, Feb 21, 2014 at 11:58 AM, Andrew Honig <ahonig(a)google.com> wrote:
On Fri, Feb 21, 2014 at 11:52 AM, Dave Anderson
<anderson(a)redhat.com> wrote:
> Right, it would be nice if the KERNELOFFSET vmcoreinfo item had gone into
> the kernel at the same time as kALSR. I see that it's not in Linus' tree
> yet -- has it been accepted into any other tree waiting to be pulled?
>
> Anyway, for that reason, I like the idea of the --kaslr=auto option, and
> maybe setting a flag somewhere, say in st->flags. And when the KERNELOFFSET
> item does eventually show up, the same flag could be set during the initial
> scan of the dumpfile header, obviating the need for --kaslr.
>
> Which reminds me -- the "SYMBOL(_stext)" check that you make in
is_netdump()
> also has to be done in is_diskdump() as well. Currently makedumpfile does
> not work with kaslr dumpfiles, but they will eventually get it working.
>
Sounds good to me, I'll do that. I'll check with kees on the
KERNELOFFSET patch status.
I CC'd you guys on a ping for that patch. I think Peter Anvin has been
busy so he didn't pick it up yet. If it doesn't get traction soon, I
can see if other x86 folks will take it.
-Kees
--
Kees Cook
Chrome OS Security