Subject: Re: [Security] [SECURITY] Fix leaking of kernel heap addresses via /proc

From: Andi Kleen <[email-masked]>
Date: Sun, 07 Nov 2010 22:52:22 +0100

Ted Ts'o <[email-masked]> writes:

> Are there any userspace programs that might be reasonably expected to
> _use_ this information?  If there is, we could just pick a random
> number at boot time, and then XOR the heap adddress with that random
> number.

If any of the addresses can be guessed ever (and that is likely if it's
allocated at boot) determining the random value will be trivial
for everyone.

-Andi

-- 
[email-masked] -- Speaking for myself only.