On Tue, May 29, 2018 at 11:01:07AM -0400, Prarit Bhargava wrote: > Kees, in early boot no pool is available so the stack canary is initialized > from > the TSC. Later in boot, the stack canary will use the the crng. > > ie) in early boot only TSC is okay, and late boot (when crng_ready() is true) > the pool will be used.
But that means all of the kernel threads (e.g., workqueues, et. al)
would not be well protected by the stack canary. That
seems.... rather unfortunate.
- Ted

