On 17.02.26 12:03, Markus Armbruster wrote:
Vladimir Sementsov-Ogievskiy <[email protected]> writes:

Remove desc, avail, and used fields as they expose process address space
information and violate ASLR.

Isn't the user of the monitor trusted?

I don't know exactly the policy here. If keep these fields, their semantics
will change anyway with these series. So I decided, it's simpler to drop
them (if no objections), keeping in mind experimental status of the command
and ASLR.


                               Since this is an experimental command, we
can safely remove these potentially sensitive fields.

Signed-off-by: Vladimir Sementsov-Ogievskiy <[email protected]>

Patch looks good.



--
Best regards,
Vladimir

Reply via email to