Re: [PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-17 Thread Baoquan He
On 07/17/17 at 04:13pm, Kees Cook wrote: > > +#ifdef CONFIG_EFI > > +/* > > + * Returns true if mirror region found (and must have been processed > > + * for slots adding) > > + */ > > +static bool process_efi_entries(unsigned long minimum, > > + unsigned long

Re: [PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-17 Thread Baoquan He
On 07/17/17 at 04:13pm, Kees Cook wrote: > > +#ifdef CONFIG_EFI > > +/* > > + * Returns true if mirror region found (and must have been processed > > + * for slots adding) > > + */ > > +static bool process_efi_entries(unsigned long minimum, > > + unsigned long

Re: [PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-17 Thread Kees Cook
On Thu, Jul 13, 2017 at 7:19 AM, Baoquan He wrote: > Kernel text may be located in non-mirror regions (movable zone) when both > address range mirroring feature and KASLR are enabled. > > The address range mirroring feature arranges such mirror region into > normal zone and other

Re: [PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-17 Thread Kees Cook
On Thu, Jul 13, 2017 at 7:19 AM, Baoquan He wrote: > Kernel text may be located in non-mirror regions (movable zone) when both > address range mirroring feature and KASLR are enabled. > > The address range mirroring feature arranges such mirror region into > normal zone and other region into

[PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-13 Thread Baoquan He
Kernel text may be located in non-mirror regions (movable zone) when both address range mirroring feature and KASLR are enabled. The address range mirroring feature arranges such mirror region into normal zone and other region into movable zone in order to locate kernel code and data in mirror

[PATCH v5 4/4] x86/boot/KASLR: Restrict kernel to be randomized in mirror regions

2017-07-13 Thread Baoquan He
Kernel text may be located in non-mirror regions (movable zone) when both address range mirroring feature and KASLR are enabled. The address range mirroring feature arranges such mirror region into normal zone and other region into movable zone in order to locate kernel code and data in mirror