arm64/kernel: kaslr: reduce module randomization range to 4 GB

[mirror_ubuntu-bionic-kernel.git] / arch / arm64 / Kconfig

diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
index 2eeb80a733c6248eddfc6eede509c62dbe668cd3..7e19bc725595b5f4effd7c85932aae698aff70b5 100644 (file)
--- a/arch/arm64/Kconfig
+++ b/arch/arm64/Kconfig
@@ -1115,7 +1115,6 @@ config ARM64_MODULE_CMODEL_LARGE
 
 config ARM64_MODULE_PLTS
        bool
-       select ARM64_MODULE_CMODEL_LARGE
        select HAVE_MOD_ARCH_SPECIFIC
 
 config RELOCATABLE
@@ -1149,12 +1148,12 @@ config RANDOMIZE_BASE
          If unsure, say N.
 
 config RANDOMIZE_MODULE_REGION_FULL
-       bool "Randomize the module region independently from the core kernel"
+       bool "Randomize the module region over a 4 GB range"
        depends on RANDOMIZE_BASE
        default y
        help
-         Randomizes the location of the module region without considering the
-         location of the core kernel. This way, it is impossible for modules
+         Randomizes the location of the module region inside a 4 GB window
+         covering the core kernel. This way, it is less likely for modules
          to leak information about the location of core kernel data structures
          but it does imply that function calls between modules and the core
          kernel will need to be resolved via veneers in the module PLT.