--- wikisrc/security/kaslr.mdwn 2018/08/02 17:24:41 1.1 +++ wikisrc/security/kaslr.mdwn 2018/08/28 13:11:52 1.2 @@ -46,6 +46,24 @@ Use To use KASLR, just choose the "Boot KASLR" option in the menu at boot time. That's it! +Technical Details +----------------- + +Kernel ASLR is applied by default in GENERIC on as many VM areas as possible. +GENERIC_KASLR offers randomization of one more area: the Kernel Image. + +Table of what gets randomized: + +[[!table data=""" +Memory Region |GENERIC |GENERIC_KASLR |Xen dom0/domU +Userland |Yes |Yes |Yes +PTE Area |Yes |Yes |No +Main Kernel Memory |Yes |Yes |Yes +Direct Map |Yes |Yes |[Not Applicable] +PCPU Area |[Not Applicable] |[Not Applicable] |[Not Applicable] +Kernel Image |No |Yes |No +"""]] + Technical Resources -------------------