diff options
| author | Daniel Borkmann <daniel@iogearbox.net> | 2018-06-11 12:19:05 +0200 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2018-07-05 10:48:20 +0200 |
| commit | 3a35170a249b6ead856b574f86e2afcf41ec496b (patch) | |
| tree | b341e46dd14a08bb0428b987190de9be3a422e82 /pkg/instance/instance.go | |
| parent | cf4583c661b8fba0e11ed7a49a3c224b18aeafde (diff) | |
bpf: disable hardening in favor of unwinding
I had missed that once hardening is enabled, it automatically disables
any exposure of JITed addresses, therefore when crashes or warnings are
thrown we don't unwind beyond a helper function. For now disable hardening.
After merge window I'll see if it's possible to detangle the case where
kernel queries kallsyms internally to find function names whenever a WARN
or BUG is thrown. If that's not possible easily, we can potentially add a
harden mode 3 which does hardening but does not disable kallsyms exposure
and then set this here for tools like syzkaller.
Fixes: ac9b19d2e435 ("bpf: enable hardening mode 1 for jited images")
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
[dvyukov: also updated dashboard/config/upstream.sysctl]
Diffstat (limited to 'pkg/instance/instance.go')
0 files changed, 0 insertions, 0 deletions
