[PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont

Jeff Law law@redhat.com
Fri Dec 11 23:01:00 GMT 2015


On 12/11/2015 03:29 PM, Andi Kleen wrote:
>> You can opt in in your development environment; equally you can switch
>> ASLR off altogether.
>>
>> The "realistic workloads" I care about are long-lived network clients
>> and servers -- you know, the things for which ASLR is relevant as a
>> security measure.
>
> They can opt in. Slow security features such as compiler stack overflow checking
> are usually opt-in, not opt-out. This is certainly in the same ballpark,
> in some cases likely higher.
And I'd argue that this is killing ASLR at a level that it should be an 
opt-out rather than opt-in.  Crippling ASLR is, IMHO, unacceptable.

jeff



More information about the Libc-alpha mailing list