CONFIG_RANDOMIZE_BASE is not enabled in utopic kernel

[Seth Arnold]

CONFIG_RANDOMIZE_BASE is not enabled in the utopic kernel; apparently it does not play nicely with CONFIG_HIBERNATE.

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1329177

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Kees Cook (kees)]

Notes from IRC:

You can either turn off CONFIG_HIBERNATE to gain it, or write patches to make those work together in some way. :) one idea I had that I haven't had time to see if it could work is to make kaslr disabled by default if CONFIG_HIBERNATE is enabled, and then if boot with "kaslr" on the kernel cmdline, hibernation would get disabled. (i.e. system owner could pick which of the two they wanted, and pre-kaslr behavior would remain distro default).

if someone could write that, i would be very happy! :)

[Tim Gardner (timg-tpi)]

Seth - this does not appear to be an issue for 3.16. CONFIG_RANDOMIZE_BASE has disappeared and CONFIG_HIBERNATE_CALLBACKS=y

[Kees Cook (kees)]

Will Utopic be 3.16 based? If so, once 24f2e0273f80ec262a772059e140a0adef35296d is in the Ubuntu kernel, it will be possible to enable CONFIG_RANDOMIZE_BASE along with CONFIG_HIBERNATE on i386 and amd64.

Otherwise, please backport a6e15a39048ec3229b9a53425f4384f55f6cc1b3 and 24f2e0273f80ec262a772059e140a0adef35296d from Linus's tree. They should apply easily to 3.15.

[Tim Gardner (timg-tpi)]

Kees - Utopic is gonna be based on a 3.16 kernel. Dunno what I was smoking when I opined in #3, but:

debian.master/config/config.common.ubuntu:CONFIG_RANDOMIZE_BASE=y
debian.master/config/config.common.ubuntu:CONFIG_HIBERNATE_CALLBACKS=y

See git://kernel.ubuntu.com/ubuntu/ubuntu-utopic.git master-next

[Tyler Hicks (tyhicks)]

The Utopic kernel shipped with KASLR support. As kees mentioned, the "kaslr" kernel cmdline option can be used to enable it. This is verifiable by comparing /proc/kallsyms (must be opened as root) with the System.map shipped with the kernel.