[PATCH] arm64: Kconfig RANDOMIZE_MODULE_REGION_FULL correction

Ross Meikleham
2020-11-07T14:31:57Z

In the 5.1.5 Kernel RANDOMIZE_MODULE_REGION_FULL was a 4GB window,
however this was changed to 2GB from 5.1.6
(see /arch/arm64/kernel/kaslr.c). This updates the
config description for RANDOMIZE_MODULE_REGION_FULL in /arch/arm64/Kconfig
to reflect this.

Signed-off-by: Ross Meikleham <RossMeikleham@gmail.com>
---
arch/arm64/Kconfig | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
index 6d232837cbee..b8fd2c590057 100644
--- a/arch/arm64/Kconfig
+++ b/arch/arm64/Kconfig
@@ -1782,11 +1782,11 @@ config RANDOMIZE_BASE
If unsure, say N.

config RANDOMIZE_MODULE_REGION_FULL
- bool "Randomize the module region over a 4 GB range"
+ bool "Randomize the module region over a 2 GB range"
depends on RANDOMIZE_BASE
default y
help
- Randomizes the location of the module region inside a 4 GB window
+ Randomizes the location of the module region inside a 2 GB window
covering the core kernel. This way, it is less likely for modules
to leak information about the location of core kernel data structures
but it does imply that function calls between modules and the core
--
2.18.0

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org