Re: [RFC][PATCH] Randomize kernel base address on boot

H. Peter Anvin
2011-05-27T17:07:34Z

On 05/27/2011 10:00 AM, Ingo Molnar wrote:
>
> The problem with your relinking solution is that a local attacker can
> easily figure out where the kernel is. So this does not protect
> against the more common break-in scenario.
>

There is another issue with it: it doesn't actually solve the real
problem other than suspend/resume, which is that the relocation agent
needs to understand what the memory space looks like at the time of boot.

I think something else we will need for this to be possible is initramfs
decoding directly from highmem, since the hack we're currently using to
deal with an initramfs/initrd located partly in highmem will break.

-hpa