From owner-freebsd-stable@FreeBSD.ORG  Wed Apr  4 15:57:08 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id A4062106566B
	for <freebsd-stable@freebsd.org>; Wed,  4 Apr 2012 15:57:08 +0000 (UTC)
	(envelope-from mpumford@mpcdata.com)
Received: from owa.bsquare.com (vpn.bsquare.com [12.107.117.66])
	by mx1.freebsd.org (Postfix) with ESMTP id 715A28FC18
	for <freebsd-stable@freebsd.org>; Wed,  4 Apr 2012 15:57:08 +0000 (UTC)
Received: from [10.150.16.163] (81.2.99.171) by BREAL.camelot.bsquare.com
	(192.168.100.67) with Microsoft SMTP Server (TLS) id 14.1.218.12;
	Wed, 4 Apr 2012 08:57:02 -0700
Message-ID: <4F7C6F4B.1090205@mpcdata.com>
Date: Wed, 4 Apr 2012 16:56:59 +0100
From: Mike Pumford <mpumford@mpcdata.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1;
	rv:12.0) Gecko/20120322 Firefox/12.0 SeaMonkey/2.9
MIME-Version: 1.0
CC: <freebsd-stable@freebsd.org>
References: <CAGE5yCpuvsVrc-+DTVas-W4fjuP2s+6PQONMOTyEbGnj2CY3ig@mail.gmail.com>
	<4F766F29.2030803@cs.stonybrook.edu>
	<CAFHbX1KiZx68MP4bCAvPc0Zui3fA4O35_z3kP781zoJqLYp7Bw@mail.gmail.com>
	<4F79D88B.3040102@cs.stonybrook.edu>
	<CAFHbX1KE15G9gx7Duw2R8zC5jL1jiEir0yMB0-s5+4xx517WtQ@mail.gmail.com>
	<4F79E27E.3000509@cs.stonybrook.edu>
	<CAGE5yCrwLosuTT2yq0DEx+z8ztKpkrB=tORmURcuh_SCz=L7qg@mail.gmail.com>
	<4F79FCB8.1090003@cs.stonybrook.edu>
	<CAGE5yCrz45AWeJGv=2UWRq7xpXZVtvsx+5O6cvaE6ZzoFrz5mA@mail.gmail.com>
	<4F7A05C4.9070808@cs.stonybrook.edu>
	<20120403170259.GA94837@neutralgood.org>
	<loom.20120404T103230-175@post.gmane.org>
	<1333550029.1090.67.camel@revolution.hippie.lan>
	<loom.20120404T165909-66@post.gmane.org>
In-Reply-To: <loom.20120404T165909-66@post.gmane.org>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [81.2.99.171]
Subject: Re: Text relocations in kernel modules
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Apr 2012 15:57:08 -0000

jb wrote:

>> From the point of view of an attacker it does not matter whether kernel module
> is loaded and linked once only. That's enough to create a window of opportunity
> for interfering with relocation process and modifying text (code).
>
Well yes but said attacker has to be able to modify KERNEL memory to do 
it. If they can do that worrying about module relocations is pointless 
as they already own the machine.

Mike