From 81555e3bd23c74ce915d246ca51fa65d84c22ae7 Mon Sep 17 00:00:00 2001 From: srv Date: Mon, 5 May 2025 15:29:27 -0500 Subject: First commit --- ...ig-Default-to-maximum-amount-of-ASLR-bits.patch | 36 ++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100755 linux-lts-6.14-rc5-blob/0003-arch-Kconfig-Default-to-maximum-amount-of-ASLR-bits.patch (limited to 'linux-lts-6.14-rc5-blob/0003-arch-Kconfig-Default-to-maximum-amount-of-ASLR-bits.patch') diff --git a/linux-lts-6.14-rc5-blob/0003-arch-Kconfig-Default-to-maximum-amount-of-ASLR-bits.patch b/linux-lts-6.14-rc5-blob/0003-arch-Kconfig-Default-to-maximum-amount-of-ASLR-bits.patch new file mode 100755 index 0000000..a080366 --- /dev/null +++ b/linux-lts-6.14-rc5-blob/0003-arch-Kconfig-Default-to-maximum-amount-of-ASLR-bits.patch @@ -0,0 +1,36 @@ +From e45bad13f468eba7426c5d10b95d4dda3c65e2a5 Mon Sep 17 00:00:00 2001 +From: "Jan Alexander Steffens (heftig)" +Date: Sat, 13 Jan 2024 15:29:25 +0100 +Subject: [PATCH 3/3] arch/Kconfig: Default to maximum amount of ASLR bits + +To mitigate https://zolutal.github.io/aslrnt/; do this with a patch to +avoid having to enable `CONFIG_EXPERT`. +--- + arch/Kconfig | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/arch/Kconfig b/arch/Kconfig +index f4b210ab0612..837d0dbb28ea 100644 +--- a/arch/Kconfig ++++ b/arch/Kconfig +@@ -1032,7 +1032,7 @@ config ARCH_MMAP_RND_BITS + int "Number of bits to use for ASLR of mmap base address" if EXPERT + range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX + default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT +- default ARCH_MMAP_RND_BITS_MIN ++ default ARCH_MMAP_RND_BITS_MAX + depends on HAVE_ARCH_MMAP_RND_BITS + help + This value can be used to select the number of bits to use to +@@ -1066,7 +1066,7 @@ config ARCH_MMAP_RND_COMPAT_BITS + int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT + range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX + default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT +- default ARCH_MMAP_RND_COMPAT_BITS_MIN ++ default ARCH_MMAP_RND_COMPAT_BITS_MAX + depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS + help + This value can be used to select the number of bits to use to +-- +2.43.0 + -- cgit v1.2.3