]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
ARM64: Enable Kernel Address Space Randomization (#1792)
authorElectron752 <mzoran@crowfest.net>
Sat, 14 Jan 2017 10:54:26 +0000 (02:54 -0800)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 8 Aug 2017 12:51:58 +0000 (14:51 +0200)
commit8e975cf2380c93dea04e0af1fb93a21fa7b7ea5a
treef783869c73240b5f062db814fcc9c007ca84919b
parentcfccaca03c53a4f60f8007cf7e0d00c1f6476acb
ARM64: Enable Kernel Address Space Randomization (#1792)

Randomization allows the mapping between virtual addresses and physical
address to be different on each boot.  This makes it more difficult
to exploit security vulnerabilities that require knowledge of fixed
hardware addresses.

The firmware generates a 8 byte random number during bootup and stores
it in the device tree under chosen/kaslr-seed. This number is used
to randomize the address mapping.

This change enables this feature in the build configuration for ARM64.

Signed-off-by: Michael Zoran <mzoran@crowfest.net>
arch/arm64/configs/bcmrpi3_defconfig