News for hackers. Stuff that matters.
Re:Unikernels are secure by majewsky on Monday July 10, 2017 @01:16PM (#14737824)
Yes. If I run e.g. `ldd /bin/bash` multiple times, it shows different memory addresses each time. That's ASLR.
Re:Unikernels are secure by strcat on Monday July 10, 2017 @05:02PM (#14739634)
cat /proc/self/maps is a better way to see that. If it's built with PIE, the executable base is randomized. Some distributions use full ASLR across the board (Alpine, Android, ChromeOS, Hardened Gentoo) while others don't yet enable PIE globally or have only recently started and it isn't all pushed out yet (OpenSUSE, Fedora, Debian).
Re:Unikernels are secure by language on Monday July 10, 2017 @02:48PM (#14738594)
Also worth mentioning that `ldd` only demonstrates how shared libraries are mmap'ed at randomized locations. Stack and heap allocations are also randomized at execution time.
Re:Unikernels are secure by agumonkey on Monday July 10, 2017 @02:45PM (#14738569)
I never bothered to check, what a m... I am. Thanks a lot :)