KSPP / linux

Linux kernel source tree (Kernel Self Protection Project)
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
Other
83 stars 5 forks source link

determine stack ASLR entropy based on vm.mmap_rnd_bits/vm.mmap_rnd_compat_bits #279

Open thestinger opened 1 year ago

thestinger commented 1 year ago

The kernel is still using much lower stack ASLR entropy than it should be. This is needed on arm64 and x86_64 at minimum. Ready to go patches from linux-hardened with no known compatibility issues:

https://github.com/anthraxx/linux-hardened/commit/bff0cf9b090cd4a7cf640037d1edbe83ee8e34f7.patch https://github.com/anthraxx/linux-hardened/commit/5b0d93bf1e46381263e26bec5b837ee2e0eb4056.patch