Re: amd64: kernel aslr support

[Maxime Villard <max%m00nbsd.net@localhost>]

Le 17/01/2018 à 21:48, Thomas Klausner a écrit :
> On Wed, Jan 17, 2018 at 08:01:19AM +0100, Maxime Villard wrote:
> > > Why does GENERIC_KASLR disable KDTRACE_HOOKS? Is this necessary, or
> > > are KDTRACE_HOOKS lowering the security somehow?
> >
> > In fact, it's because KDTRACE_HOOKS wants to parse one CTF section; but with
> > our implementation we have several of them, and KDTRACE_HOOKS does not
> > handle that.
>
> Chuck's patch for better ZFS/DTRACE support includes parsing of
> multiple CTF sections, intended for use with kernel modules (so that
> each kernel module can include its CTF). Will that be sufficient for
> KASLR?

I guess so. But I remember there was also another issue, for some reason the
multiple CTF sections had a very huge size, and I didn't understand why. But
it can be re-investigated once the new DTRACE support is in the tree.

Maxime