[PATCH] Add Prefer_MAP_32BIT_EXEC for Silvermont
Jeff Law
law@redhat.com
Fri Dec 11 23:01:00 GMT 2015
On 12/11/2015 03:29 PM, Andi Kleen wrote:
>> You can opt in in your development environment; equally you can switch
>> ASLR off altogether.
>>
>> The "realistic workloads" I care about are long-lived network clients
>> and servers -- you know, the things for which ASLR is relevant as a
>> security measure.
>
> They can opt in. Slow security features such as compiler stack overflow checking
> are usually opt-in, not opt-out. This is certainly in the same ballpark,
> in some cases likely higher.
And I'd argue that this is killing ASLR at a level that it should be an
opt-out rather than opt-in. Crippling ASLR is, IMHO, unacceptable.
jeff
More information about the Libc-alpha
mailing list