[UBOOT PATCH] arm64: zynqmp: Enable the config CMD_KASLRSEED

Michal Simek michal.simek at amd.com
Fri Aug 25 09:33:20 CEST 2023



On 8/24/23 05:27, Venkatesh Yadav Abbarapu wrote:
> Kernel Address Space Layout Randomization (KASLR) is a hardening
> feature that aims to make it more difficult to take advantage
> of known exploits in the kernel, by placing kernel data structures
> at a random address at each boot.The bootloader supports randomizing
> the virtual address at which the kernel image is loaded.
> The bootloader must provide entropy by passing a random u64 value
> in the /chosen/kaslr-seed device tree node.
> When we run "kaslrseed" command from U-Boot, the bootloader will
> genarate the kaslr-seed and update the /chosen/kaslr-seed DT property.
> 
> Signed-off-by: Venkatesh Yadav Abbarapu <venkatesh.abbarapu at amd.com>
> ---
>   configs/xilinx_zynqmp_virt_defconfig | 1 +
>   1 file changed, 1 insertion(+)
> 
> diff --git a/configs/xilinx_zynqmp_virt_defconfig b/configs/xilinx_zynqmp_virt_defconfig
> index acab38fefe..b67b637e52 100644
> --- a/configs/xilinx_zynqmp_virt_defconfig
> +++ b/configs/xilinx_zynqmp_virt_defconfig
> @@ -91,6 +91,7 @@ CONFIG_CMD_RTC=y
>   CONFIG_CMD_TIME=y
>   CONFIG_CMD_GETTIME=y
>   CONFIG_CMD_RNG=y
> +CONFIG_CMD_KASLRSEED=y
>   CONFIG_CMD_TIMER=y
>   CONFIG_CMD_REGULATOR=y
>   CONFIG_CMD_SMC=y

Applied.
M


More information about the U-Boot mailing list