target/linux/brcm2708/patches-4.14/950-0101-ARM64-Enable-Kernel-Address-Space-Randomization-1792.patch

   1 From e490dd44e4f57da93ef4c42c76dbbbd4fd3124d2 Mon Sep 17 00:00:00 2001
   2 From: Electron752 <mzoran@crowfest.net>
   3 Date: Sat, 14 Jan 2017 02:54:26 -0800
   4 Subject: [PATCH 101/454] ARM64: Enable Kernel Address Space Randomization
   5  (#1792)
   6
   7 Randomization allows the mapping between virtual addresses and physical
   8 address to be different on each boot.  This makes it more difficult
   9 to exploit security vulnerabilities that require knowledge of fixed
  10 hardware addresses.
  11
  12 The firmware generates a 8 byte random number during bootup and stores
  13 it in the device tree under chosen/kaslr-seed. This number is used
  14 to randomize the address mapping.
  15
  16 This change enables this feature in the build configuration for ARM64.
  17
  18 Signed-off-by: Michael Zoran <mzoran@crowfest.net>
  19 ---
  20  arch/arm64/configs/bcmrpi3_defconfig | 1 +
  21  1 file changed, 1 insertion(+)
  22
  23 --- a/arch/arm64/configs/bcmrpi3_defconfig
  24 +++ b/arch/arm64/configs/bcmrpi3_defconfig
  25 @@ -53,6 +53,7 @@ CONFIG_ARMV8_DEPRECATED=y
  26  CONFIG_SWP_EMULATION=y
  27  CONFIG_CP15_BARRIER_EMULATION=y
  28  CONFIG_SETEND_EMULATION=y
  29 +CONFIG_RANDOMIZE_BASE=y
  30  CONFIG_CMDLINE="console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait"
  31  CONFIG_BINFMT_MISC=y
  32  CONFIG_COMPAT=y