Linux 4.8 Implements ASLR For Kernel Memory Sections

[phoronix]

Phoronix: Linux 4.8 Implements ASLR For Kernel Memory Sections

In addition to hardened usercopy support being prepped for the Linux 4.8 kernel, the new CONFIG_RANDOMIZE_MEMORY option was sent in this morning via a separate pull request as another security feature for the 4.8 cycle...

http://www.phoronix.com/scan.php?page=news_item&px=Linux-4.8-ASLR-Kernel-Mem-Sects

[FireBurn]

Would be great to see how much of a performance impact this would have

[tessio]

Would be great to see how much of a performance impact this would have

Indeed. OpenBSD has this feature for ages, and is not known by it's speed.

[jaxxed]

Indeed. OpenBSD has this feature for ages, and is not known by it's speed.

My car is blue; my car is not fast, therefore blue cars are not fast.

[tessio]

My car is blue; my car is not fast, therefore blue cars are not fast.

Memory access is for computer speed exactly what color is for car speed.. wright.
Pseudo logical arguments aside, no one thinks it will be a major performance hog.. but it's nice to benchmark it to see what the impact is.
Security rarely comes free, there's almost always a trade off.