On Fri, Dec 14, 2007 at 12:45:23PM -0800, John Reiser wrote:
Um, no. Just seeding the pool with your own data won't help, since
that still won't tell you the initial contents of the pool. And if
you know the initial contents of the pool, then you've broken root.
And being able to steal from the pool also assumes that you've broken
into the system; it is never, ever exported to userspace, even if
you're root (unless you use something like /dev/kmem). Furthermore,
if you don't know the previous contents of the pool, you'll never be
able to recover the information, either now or five years in the
future, since information is XOR'ed into the pool.
How about wrapping it in a #ifdef CONFIG_UML, which is the only way
you can use Valgrind? The memset will slow down things unnecessarily,
and mixing in the unknown previous contents of the stack (a) doesn't
hurt, and (b) could make life more complicated for an attacker.
- Ted
--
