On Thu, Feb 2, 2017 at 9:11 PM, Bhupesh Sharma <[email protected]> wrote: > powerpc: arch_mmap_rnd() uses hard-coded values, (23-PAGE_SHIFT) for > 32-bit and (30-PAGE_SHIFT) for 64-bit, to generate the random offset > for the mmap base address. > > This value represents a compromise between increased > ASLR effectiveness and avoiding address-space fragmentation. > Replace it with a Kconfig option, which is sensibly bounded, so that > platform developers may choose where to place this compromise. > Keep default values as new minimums. > > This patch makes sure that now powerpc mmap arch_mmap_rnd() approach > is similar to other ARCHs like x86, arm64 and arm. > > Cc: Alexander Graf <[email protected]> > Cc: Benjamin Herrenschmidt <[email protected]> > Cc: Paul Mackerras <[email protected]> > Cc: Michael Ellerman <[email protected]> > Cc: Anatolij Gustschin <[email protected]> > Cc: Alistair Popple <[email protected]> > Cc: Matt Porter <[email protected]> > Cc: Vitaly Bordug <[email protected]> > Cc: Scott Wood <[email protected]> > Cc: Kumar Gala <[email protected]> > Cc: Daniel Cashman <[email protected]> > Signed-off-by: Bhupesh Sharma <[email protected]> > Reviewed-by: Kees Cook <keescook at chromium.org>
This " at " should be "@", but otherwise, yay v2! :) -Kees -- Kees Cook Pixel Security
