On Mon, Jan 26, 2009 at 12:14:10AM -0300, Ricardo Rolim wrote: > Hi there, > > Apparently I'm not getting library address randomization for any > programs (compiled or not as PIE). Whereas the binary itself, stack > and heap are randomly getting their addresses changed from one > execution to the next, the library stands still at a predictable > location. Strangely enough I've got the expected results out of Ubuntu > 8.10. Here's one example: > > [ricardo@localhost ~]$ cat /proc/sys/kernel/randomize_va_space > 2 > [ricardo@localhost ~]$ cat /proc/sys/kernel/exec-shield > 1 > [ricardo@localhost ~]$ echo 'int main(){}' > dummy.c > [ricardo@localhost ~]$ gcc -fpie -pie -o dummy dummy.c > [ricardo@localhost ~]$ ldd dummy > linux-gate.so.1 => (0x00130000) > libc.so.6 => /lib/libc.so.6 (0x00133000) > /lib/ld-linux.so.2 (0x00110000) > [ricardo@localhost ~]$ ldd dummy > linux-gate.so.1 => (0x00130000) > libc.so.6 => /lib/libc.so.6 (0x00133000) > /lib/ld-linux.so.2 (0x00110000) What kernel version are you running? Kyle fixed up some of this code last week. Dave -- http://www.codemonkey.org.uk -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list