| |||||||||||||
Linux ASLR vulnerabilitiesLinux ASLR vulnerabilitiesPosted Apr 30, 2009 16:34 UTC (Thu) by nix (subscriber, #2304)Parent article: Linux ASLR vulnerabilities
Oh that first one is quite nasty. We can stop reporting wchan for non-self users when non-root without breaking too much, but doing the same for /proc/*/stat is out of the question. Perhaps we can blank out just the sensitive fields in such cases?
(Log in to post comments)
Linux ASLR vulnerabilities Posted May 2, 2009 13:15 UTC (Sat) by willezurmacht (guest, #58372) [Link]
The problem with blacklisting is that you never know when your blacklist is enough. The question is if there are any true legitimate uses of this and what's specifically required.
Either way, there are plenty of other methods to get around the difficulties presented by ASLR as of its current implementation in mainline kernel.
I would like to know if Jake's patch goes through, hopefully it does.
|
|||||||||||||