Re: [PATCH] Prefer kASLR over Hibernation

From: Ingo Molnar
Date: Wed Apr 06 2016 - 20:50:18 EST



* Rafael J. Wysocki <rafael@xxxxxxxxxx> wrote:

> [...]
>
> One of the weak points is the final jump, because it has to be done to the
> physical location of the image kernel's entry point even though the virtual
> addresses of it may differ between the boot and the image kernels. The seed is
> not needed for that, only the physical address of the entry point. The boot
> kernel doesn't have it today, though, because the virtual address of that is
> passed in the image header. That should not be too difficult to change, however.

I didn't realize we jumped to the image kernel as well - I (wrongly) assumed we
kept the bootup kernel. That should indeed make hibernation mostly
kASLR-invariant.

Thanks,

Ingo