This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont

From: Jeff Law <law at redhat dot com>
To: Andi Kleen <andi at firstfloor dot org>, Zack Weinberg <zackw at panix dot com>
Cc: "H.J. Lu" <hjl dot tools at gmail dot com>, Adhemerval Zanella <adhemerval dot zanella at linaro dot org>, GNU C Library <libc-alpha at sourceware dot org>
Date: Fri, 11 Dec 2015 16:01:51 -0700
Subject: Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
Authentication-results: sourceware.org; auth=none
References: <CAMe9rOr-LypZXvq4Y4uwE_JybYoTXctZXMLjo4TH517NnC6omg at mail dot gmail dot com> <566B01BE dot 1070703 at linaro dot org> <CAKCAbMhMArQ9wsXhw2y+Fvv+_3O5i4g8pdDQdWo6_1YxqfVxkQ at mail dot gmail dot com> <CAMe9rOrVjSnhp-EzmAnVBg10wbqk9U4n+hL-3xF5=DPZP5co1A at mail dot gmail dot com> <CAKCAbMhk69hUBbrQ=0j0NDYjRT6R-EK1+F43+Mmi9FwS7epexQ at mail dot gmail dot com> <CAKCAbMhA6x4r6Bhw8cnAavoWzjWsm6WM8JPzrnCsrqxbEswS_g at mail dot gmail dot com> <87egeszoq3 dot fsf at tassilo dot jf dot intel dot com> <CAKCAbMibxh54DGJ6p59ah6jQK=oFkH9LCZo0UDBefQeh1y-5eg at mail dot gmail dot com> <CAMe9rOoyc4MXVz74GmjViora-iCEKitQXbpX9EB+Ln1Q_DAD_A at mail dot gmail dot com> <CAKCAbMi_noBivP+ksLaotNtfEhGrtUuUacbnZgjMg5m0PfEniw at mail dot gmail dot com> <20151211222913 dot GT15533 at two dot firstfloor dot org>

On 12/11/2015 03:29 PM, Andi Kleen wrote:

You can opt in in your development environment; equally you can switch
ASLR off altogether.

The "realistic workloads" I care about are long-lived network clients
and servers -- you know, the things for which ASLR is relevant as a
security measure.


They can opt in. Slow security features such as compiler stack overflow checking
are usually opt-in, not opt-out. This is certainly in the same ballpark,
in some cases likely higher.

And I'd argue that this is killing ASLR at a level that it should be anopt-out rather than opt-in. Crippling ASLR is, IMHO, unacceptable.


jeff

Follow-Ups:
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Andi Kleen

References:
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: H.J. Lu
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Adhemerval Zanella
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Zack Weinberg
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: H.J. Lu
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Zack Weinberg
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Zack Weinberg
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Andi Kleen
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Zack Weinberg
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: H.J. Lu
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Zack Weinberg
- Re: [PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
  - From: Andi Kleen

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]