Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unhashed kernel memory addresses #39

Open
stephank opened this issue Jun 2, 2022 · 0 comments
Open

Unhashed kernel memory addresses #39

stephank opened this issue Jun 2, 2022 · 0 comments

Comments

@stephank
Copy link
Member

stephank commented Jun 2, 2022

As of NixOS 22.05, this is logged at startup:

kernel: **********************************************************
kernel: **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
kernel: **                                                      **
kernel: ** This system shows unhashed kernel memory addresses   **
kernel: ** via the console, logs, and other interfaces. This    **
kernel: ** might reduce the security of your system.            **
kernel: **                                                      **
kernel: ** If you see this message and you are not debugging    **
kernel: ** the kernel, report this immediately to your system   **
kernel: ** administrator!                                       **
kernel: **                                                      **
kernel: **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
kernel: **********************************************************

This is apparently caused by the slub_debug=FP kernel parameter set by the hardened profile.

We already have other workarounds in place on top of the hardened profile, and I'm not sure if it's better we just copy over and tweak the profile instead of using it directly.

I think the upstream issue is: NixOS/nixpkgs#90704

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant