Files
kernel-tenderloin-3.0/include/linux
Ingo Molnar e6e5494cb2 [PATCH] vdso: randomize the i386 vDSO by moving it into a vma
Move the i386 VDSO down into a vma and thus randomize it.

Besides the security implications, this feature also helps debuggers, which
can COW a vma-backed VDSO just like a normal DSO and can thus do
single-stepping and other debugging features.

It's good for hypervisors (Xen, VMWare) too, which typically live in the same
high-mapped address space as the VDSO, hence whenever the VDSO is used, they
get lots of guest pagefaults and have to fix such guest accesses up - which
slows things down instead of speeding things up (the primary purpose of the
VDSO).

There's a new CONFIG_COMPAT_VDSO (default=y) option, which provides support
for older glibcs that still rely on a prelinked high-mapped VDSO.  Newer
distributions (using glibc 2.3.3 or later) can turn this option off.  Turning
it off is also recommended for security reasons: attackers cannot use the
predictable high-mapped VDSO page as syscall trampoline anymore.

There is a new vdso=[0|1] boot option as well, and a runtime
/proc/sys/vm/vdso_enabled sysctl switch, that allows the VDSO to be turned
on/off.

(This version of the VDSO-randomization patch also has working ELF
coredumping, the previous patch crashed in the coredumping code.)

This code is a combined work of the exec-shield VDSO randomization
code and Gerd Hoffmann's hypervisor-centric VDSO patch. Rusty Russell
started this patch and i completed it.

[akpm@osdl.org: cleanups]
[akpm@osdl.org: compile fix]
[akpm@osdl.org: compile fix 2]
[akpm@osdl.org: compile fix 3]
[akpm@osdl.org: revernt MAXMEM change]
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Arjan van de Ven <arjan@infradead.org>
Cc: Gerd Hoffmann <kraxel@suse.de>
Cc: Rusty Russell <rusty@rustcorp.com.au>
Cc: Zachary Amsden <zach@vmware.com>
Cc: Andi Kleen <ak@muc.de>
Cc: Jan Beulich <jbeulich@novell.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-06-27 17:32:38 -07:00
..
2006-06-26 18:35:02 +02:00
2006-03-28 09:16:05 -08:00
2006-03-23 07:38:09 -08:00
2006-06-26 09:58:36 -07:00
2006-05-08 16:32:05 -07:00
2006-06-08 15:14:23 -07:00
2006-06-23 02:07:36 -07:00
2006-03-31 12:18:54 -08:00
2006-06-25 10:01:19 -07:00
2006-03-26 08:56:56 -08:00
2006-06-25 10:01:06 -07:00
2006-06-26 09:58:34 -07:00
2006-03-20 17:09:11 -08:00
2006-03-20 22:41:23 -08:00
2006-06-26 01:51:23 -04:00
2006-06-20 20:24:58 -07:00
2006-02-08 01:03:52 -05:00
2006-03-20 22:21:10 -08:00
2006-06-21 12:40:49 -07:00
2006-06-23 07:43:08 -07:00
2006-06-26 09:58:18 -07:00
2006-06-05 12:29:17 -07:00
2006-03-22 07:53:57 -08:00
2006-06-25 10:01:13 -07:00
2006-03-23 07:38:14 -08:00
2006-03-23 07:38:14 -08:00
2006-03-20 13:44:40 -05:00
2006-06-25 06:38:11 -04:00
2006-06-25 06:27:31 -04:00
2006-06-23 07:42:46 -07:00
2006-06-25 10:01:09 -07:00
2006-06-22 22:11:56 -04:00
2006-06-22 15:05:56 -07:00
2006-03-27 08:44:48 -08:00
2006-05-04 06:55:12 +02:00
2006-06-23 07:42:49 -07:00
2006-06-25 10:01:06 -07:00
2006-06-25 10:01:06 -07:00
2006-06-25 10:01:14 -07:00
2006-06-17 21:29:55 -07:00
2006-03-23 07:38:12 -08:00
2006-04-02 00:08:05 -05:00
2006-06-23 02:07:42 -07:00
2006-03-28 09:16:05 -08:00
2006-06-23 07:43:06 -07:00
2006-06-26 10:51:09 -07:00
2006-03-31 12:18:56 -08:00
2006-03-23 07:38:14 -08:00
2006-03-23 07:12:57 -05:00