Re: [PATCH v2 08/10] x86-64: Emulate vsyscalls

Ingo Molnar
2011-05-30T07:46:28Z

* Andy Lutomirski <luto@MIT.EDU> wrote:

> There's a fair amount of code in the vsyscall page, and who knows
> what will happen if an exploit jumps into the middle of it. Reduce
> the risk by replacing most of it with short magic incantations that
> are useless if entered in the middle. This change can be disabled
> by CONFIG_UNSAFE_VSYSCALLS (default y).

btw., please flip the default or consider removing the option
altogether.

We want to improve security and we want safe vsyscalls the default,
and it's no good if we make it too easy for users to keep the fire
door open all the time! :-)

Thanks,

Ingo