Re: + syscalls-x86-add-__nr_kcmp-syscall-v8.patch added to -mm tree

H. Peter Anvin
2012-04-10T23:33:37Z

On 04/10/2012 04:08 PM, Oleg Nesterov wrote:
>
> OK, since this is discussed again...
>
> Can this comment can also explain why do we obfuscate the pointers
> by type? I mean, I don't really understand why the one-dimensional
> cookies[2] is "not enough" from security pov.
>

Because it's cheap. "Just enough" is not what you want to shoot for,
ever, you want to get past the "just enough" point and then consider
"what can I get for cheap at this point"?

-hpa