1 From 6dfa60daaa0966a8e414ab0a7fd002a99001920a Mon Sep 17 00:00:00 2001
2 From: Electron752 <mzoran@crowfest.net>
3 Date: Sat, 14 Jan 2017 02:54:26 -0800
4 Subject: [PATCH] ARM64: Enable Kernel Address Space Randomization (#1792)
6 Randomization allows the mapping between virtual addresses and physical
7 address to be different on each boot. This makes it more difficult
8 to exploit security vulnerabilities that require knowledge of fixed
11 The firmware generates a 8 byte random number during bootup and stores
12 it in the device tree under chosen/kaslr-seed. This number is used
13 to randomize the address mapping.
15 This change enables this feature in the build configuration for ARM64.
17 Signed-off-by: Michael Zoran <mzoran@crowfest.net>
19 arch/arm64/configs/bcmrpi3_defconfig | 1 +
20 1 file changed, 1 insertion(+)
22 --- a/arch/arm64/configs/bcmrpi3_defconfig
23 +++ b/arch/arm64/configs/bcmrpi3_defconfig
24 @@ -53,6 +53,7 @@ CONFIG_ARMV8_DEPRECATED=y
25 CONFIG_SWP_EMULATION=y
26 CONFIG_CP15_BARRIER_EMULATION=y
27 CONFIG_SETEND_EMULATION=y
28 +CONFIG_RANDOMIZE_BASE=y
29 CONFIG_CMDLINE="console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait"