2024-10-29 05:12:06 +03:00
|
|
|
From cda0e050fec85635986e9cfe991e26339bf305dc Mon Sep 17 00:00:00 2001
|
|
|
|
|
From: "Jan Alexander Steffens (heftig)" <heftig@archlinux.org>
|
|
|
|
|
Date: Sat, 13 Jan 2024 15:29:25 +0100
|
|
|
|
|
Subject: arch/Kconfig: Default to maximum amount of ASLR bits
|
|
|
|
|
|
|
|
|
|
To mitigate https://zolutal.github.io/aslrnt/; do this with a patch to
|
|
|
|
|
avoid having to enable `CONFIG_EXPERT`.
|
|
|
|
|
---
|
|
|
|
|
arch/Kconfig | 4 ++--
|
|
|
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
|
|
|
|
|
|
--- a/arch/Kconfig
|
|
|
|
|
+++ b/arch/Kconfig
|
2024-12-10 00:17:37 +03:00
|
|
|
@@ -1089,7 +1089,7 @@ config ARCH_MMAP_RND_BITS
|
2024-10-29 05:12:06 +03:00
|
|
|
int "Number of bits to use for ASLR of mmap base address" if EXPERT
|
|
|
|
|
range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX
|
|
|
|
|
default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT
|
|
|
|
|
- default ARCH_MMAP_RND_BITS_MIN
|
|
|
|
|
+ default ARCH_MMAP_RND_BITS_MAX
|
|
|
|
|
depends on HAVE_ARCH_MMAP_RND_BITS
|
|
|
|
|
help
|
|
|
|
|
This value can be used to select the number of bits to use to
|
2024-12-10 00:17:37 +03:00
|
|
|
@@ -1123,7 +1123,7 @@ config ARCH_MMAP_RND_COMPAT_BITS
|
2024-10-29 05:12:06 +03:00
|
|
|
int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT
|
|
|
|
|
range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX
|
|
|
|
|
default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
|
|
|
|
|
- default ARCH_MMAP_RND_COMPAT_BITS_MIN
|
|
|
|
|
+ default ARCH_MMAP_RND_COMPAT_BITS_MAX
|
|
|
|
|
depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS
|
|
|
|
|
help
|
|
|
|
|
This value can be used to select the number of bits to use to
|
