On Thu, Jun 12, 2014 at 12:48 PM, H. Peter Anvin <hpa@xxxxxxxxx> wrote: > On 06/12/2014 12:46 PM, Kees Cook wrote: >> Distros want to be able to offer CONFIG_RANDOMIZE_BASE as well as >> CONFIG_HIBERNATION in a single kernel. Instead of making kASLR depend on >> !HIBERNATION at compile time, allow kaslr to be selectable at boot time >> (via "kaslr" kernel command line), which will disable hibernation in the >> kernel. In this way the end user can choose which feature they want more >> with hibernation continuing to stay enabled by default (no surprises). > > Any way we can make them work together instead? I'm sure there is, but I don't know the solution. :) At the very least this gets us one step closer (we can build them together). -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-doc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
