FS#63648 - [linux-hardened] Enable CONFIG_HIBERNATION

Attached to Project: Arch Linux
Opened by Tolik (tolik) - Wednesday, 04 September 2019, 07:41 GMT
Last edited by Levente Polyak (anthraxx) - Wednesday, 04 September 2019, 17:20 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Levente Polyak (anthraxx)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

As far as I understand, aslr and hibernation has been made compatible: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866337#14 . I checked, and hibernation works for me with aslr enabled.

Anonymous mapping randomization test : 32 quality bits (guessed)
Heap randomization test (ET_EXEC) : 40 quality bits (guessed)
Heap randomization test (PIE) : 40 quality bits (guessed)
Main executable randomization (ET_EXEC) : 32 quality bits (guessed)
Main executable randomization (PIE) : 32 quality bits (guessed)
Shared library randomization test : 32 quality bits (guessed)
VDSO randomization test : 32 quality bits (guessed)
Stack randomization test (SEGMEXEC) : 40 quality bits (guessed)
Stack randomization test (PAGEEXEC) : 40 quality bits (guessed)
Arg/env randomization test (SEGMEXEC) : 44 quality bits (guessed)
Arg/env randomization test (PAGEEXEC) : 44 quality bits (guessed)
Offset to library randomisation (ET_EXEC): 34 quality bits (guessed)
Offset to library randomisation (ET_DYN) : 34 quality bits (guessed)
Randomization under memory exhaustion @~0: 32 bits (guessed)
Randomization under memory exhaustion @0 : 32 bits (guessed)

Can hibernation be enabled? Thanks.
This task depends upon

Closed by  Levente Polyak (anthraxx)
Wednesday, 04 September 2019, 17:20 GMT
Reason for closing:  Won't implement
Comment by Dave Reisner (falconindy) - Wednesday, 04 September 2019, 13:58 GMT
linux already has this. I presume you're asking about linux-hardened, where this isn't enabled.
Comment by Tolik (tolik) - Wednesday, 04 September 2019, 17:05 GMT
Sorry, I came from https://www.archlinux.org/packages/extra/x86_64/linux-hardened/ and thought "linux-hardened" would be filled in. Yes, I'm asking about linux-hardened. Do I have to create a new issue?
Comment by Levente Polyak (anthraxx) - Wednesday, 04 September 2019, 17:19 GMT
its not about kaslr, having this enabled allows replacement of the running kernel given certain circumstances and access as it suspends the state to disc.
for hardened its a matter of choice to not have hibernation
if you absolutely need hibernation and can't live with suspend to ram, you will need to compile your own variant

Loading...