Re: CVS commit: src/sys/kern

[Maxime Villard <max%m00nbsd.net@localhost>]

Le 03/12/2018 à 01:11, Christos Zoulas a écrit :
> Module Name:	src
> Committed By:	christos
> Date:		Mon Dec  3 00:11:02 UTC 2018
>
> Modified Files:
> 	src/sys/kern: files.kern init_sysctl.c
>
> Log Message:
> Expose addresses depending on the KASLR setting (from mrg@). Restores the
> status quo of exposing kernel addresses if there is no KASLR.
>
>
> To generate a diff of this commit:
> cvs rdiff -u -r1.26 -r1.27 src/sys/kern/files.kern
> cvs rdiff -u -r1.219 -r1.220 src/sys/kern/init_sysctl.c
>
> Please note that diffs are not public domain; they are subject to the
> copyright notices on the relevant files.

This is bad. GENERIC already has some KASLR enabled by default [1], and
with your change you're rendering that useless. Please revert.

[1] http://wiki.netbsd.org/security/kaslr/