On Wed, Feb 26, 2014 at 6:53 AM, Dave Anderson <anderson(a)redhat.com> wrote:
 ----- Original Message -----
 ...
>
> So, with all of the above in place, off the top of my head these would
> be the remaining issues:
>
> (1) Support for the KERNELOFFSET vmcoreinfo entry, which if it exists,
>     would be used to mimic/obviate the --kalsr=auto functionality. 
FWIW, hpa has picked up the vmcoreinfo change and is going to try to
push it for 3.14.
> (2) Introducing/allowing --kalsr support for 32-bit x86 kernels.
>
> (3) Support for compressed KASLR kdumps when they become supported by the
>     makedumpfile facility; as far as crash is concerned, though, it should
>     "just work".
>
 And I guess this one as well?
   [PATCH v2] x86, kaslr: randomize module base load address
   
https://lkml.org/lkml/2014/2/25/630
 Although it only seems like it bumps up the minimum base address
 for the modules virtual address region? 
Right, this just "skips" a random chunk of memory at the start of the
module area. I don't expect this to break anything, though.
-Kees
-- 
Kees Cook
Chrome OS Security