News for hackers. Stuff that matters.
Re:The status of Linux kernel hardening by eeZah7Ux on Thursday November 10, 2016 @08:15AM (#12920059)
No. If the seed would be made available only in a kernel bug report.
Re:The status of Linux kernel hardening by wyldfire on Thursday November 10, 2016 @09:25AM (#12920562)
Yes, that is what frederikvs probably means but access to the seed could become a new weakest link of ASLR. Presumably only available to CAP_SYS_ADMIN/uid 0, but it's worth a great deal of caution in designing the feature that allows determining what the seed was.
Re:The status of Linux kernel hardening by nickpsecurity on Thursday November 10, 2016 @09:29AM (#12920595)
Further adding to that, the seed could be changed before that bug report was submitted. A dedicated tool with a FSM and minimal privileges does it. That lets us verify it strongly.