提交 6433a856 编写于 作者: L Lukas Bulwahn 提交者: Zheng Zengkai

Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization

stable inclusion
from stable-v5.10.94
commit 5d38cbf66dd7df04f06be86d812c7e5861cd3a69
bugzilla: https://gitee.com/openeuler/kernel/issues/I531X9

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=5d38cbf66dd7df04f06be86d812c7e5861cd3a69

--------------------------------

commit 82ca6732 upstream.

The config RANDOMIZE_SLAB does not exist, the authors probably intended to
refer to the config RANDOMIZE_BASE, which provides kernel address-space
randomization. They probably just confused SLAB with BASE (these two
four-letter words coincidentally share three common letters), as they also
point out the config SLAB_FREELIST_RANDOM as further randomization within
the same sentence.

Fix the reference of the config for kernel address-space randomization to
the config that provides that.

Fixes: 6e885594 ("Documentation: Add section about CPU vulnerabilities for Spectre")
Signed-off-by: NLukas Bulwahn <lukas.bulwahn@gmail.com>
Link: https://lore.kernel.org/r/20211230171940.27558-1-lukas.bulwahn@gmail.comSigned-off-by: NJonathan Corbet <corbet@lwn.net>
Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: NZheng Zengkai <zhengzengkai@huawei.com>
Acked-by: NXie XiuQi <xiexiuqi@huawei.com>
上级 91e7d8e2
...@@ -468,7 +468,7 @@ Spectre variant 2 ...@@ -468,7 +468,7 @@ Spectre variant 2
before invoking any firmware code to prevent Spectre variant 2 exploits before invoking any firmware code to prevent Spectre variant 2 exploits
using the firmware. using the firmware.
Using kernel address space randomization (CONFIG_RANDOMIZE_SLAB=y Using kernel address space randomization (CONFIG_RANDOMIZE_BASE=y
and CONFIG_SLAB_FREELIST_RANDOM=y in the kernel configuration) makes and CONFIG_SLAB_FREELIST_RANDOM=y in the kernel configuration) makes
attacks on the kernel generally more difficult. attacks on the kernel generally more difficult.
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册