Page MenuHomeFreeBSD

arm64Project
ActivePublic

Details

Description

FreeBSD/arm64

Recent Activity

Mar 29 2022

tommi.pernila_iki.fi added a watcher for arm64: tommi.pernila_iki.fi.
Mar 29 2022, 3:17 PM

Feb 17 2022

cperciva closed D20780: Add support for getting early entropy from the UEFI RNG protocol.
Feb 17 2022, 9:12 PM · csprng, security, arm64
cperciva added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

I'll do the commit. Thanks to Greg for writing this and to everyone who helped to review it!

Feb 17 2022, 9:11 PM · csprng, security, arm64

Feb 16 2022

markm added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

Who is going to do the actual commit? I'm happy to do it if no-one else wants to? Whoever does it has csprng@ green-light.

Feb 16 2022, 6:16 PM · csprng, security, arm64
kevans accepted D20780: Add support for getting early entropy from the UEFI RNG protocol.

Last nit can be done pre-commit or I can whack it post-commit; ok from lua perspective.

Feb 16 2022, 1:09 AM · csprng, security, arm64
kevans added inline comments to D20780: Add support for getting early entropy from the UEFI RNG protocol.
Feb 16 2022, 1:08 AM · csprng, security, arm64
cperciva added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

Is this ready to be committed? I'm happy to do it myself but markm said he was going to commit (prior to the latest round of changes) -- don't want to commit prematurely if you're still waiting for something.

Feb 16 2022, 12:50 AM · csprng, security, arm64

Feb 8 2022

david.elliott3040_gmail.com added a member for arm64: david.elliott3040_gmail.com.
Feb 8 2022, 11:46 AM

Jan 29 2022

markm accepted D20780: Add support for getting early entropy from the UEFI RNG protocol.
Jan 29 2022, 10:17 AM · csprng, security, arm64

Jan 28 2022

markm added inline comments to D20780: Add support for getting early entropy from the UEFI RNG protocol.
Jan 28 2022, 6:05 PM · csprng, security, arm64
greg_unrelenting.technology updated the diff for D20780: Add support for getting early entropy from the UEFI RNG protocol.

Yep, I've had basically the exact same opinion as @delphij about the copyright. Let's go with Intel.

Jan 28 2022, 11:59 AM · csprng, security, arm64

Jan 27 2022

delphij accepted D20780: Add support for getting early entropy from the UEFI RNG protocol.
Jan 27 2022, 5:52 PM · csprng, security, arm64
markm added inline comments to D20780: Add support for getting early entropy from the UEFI RNG protocol.
Jan 27 2022, 5:42 PM · csprng, security, arm64

Jan 26 2022

greg_unrelenting.technology updated the diff for D20780: Add support for getting early entropy from the UEFI RNG protocol.

So seems like it's easier to just do it all in core.lua, which is where lots of config accesses are anyway.

Jan 26 2022, 9:31 PM · csprng, security, arm64

Jan 17 2022

markm added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

err, I have not addressed the "isUEFIBoot" thing and the "This file needs a copyright / license at the top" thing…

Jan 17 2022, 8:42 AM · csprng, security, arm64

Jan 16 2022

greg_unrelenting.technology added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

err, I have not addressed the "isUEFIBoot" thing and the "This file needs a copyright / license at the top" thing…

Jan 16 2022, 1:24 PM · csprng, security, arm64

Jan 15 2022

cperciva added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

Thanks! Can you also MFC it to stable/13 after a week?

Jan 15 2022, 5:48 PM · csprng, security, arm64
markm added a comment to D20780: Add support for getting early entropy from the UEFI RNG protocol.

Is this waiting for anything else before it gets committed?

Jan 15 2022, 9:30 AM · csprng, security, arm64

Jan 14 2022

Herald added a reviewer for D20780: Add support for getting early entropy from the UEFI RNG protocol: manu.

Is this waiting for anything else before it gets committed?

Jan 14 2022, 10:14 PM · csprng, security, arm64

Nov 16 2021

mw closed D27666: Enable ASLR by default for 64-bit executables..
Nov 16 2021, 10:27 PM · PowerPC, security, arm64

Nov 15 2021

mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 8:26 PM · PowerPC, security, arm64
mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 8:26 PM · PowerPC, security, arm64
emaste accepted D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 7:12 PM · PowerPC, security, arm64
emaste added a comment to D27666: Enable ASLR by default for 64-bit executables..

I did a minor edit on the proposed commit message to clarify some things (sorry I do not have it as a diff)

Nov 15 2021, 7:12 PM · PowerPC, security, arm64
kib accepted D27666: Enable ASLR by default for 64-bit executables..
In D27666#745003, @mw wrote:

Altough I agree it should be safe to enable ASLR 32-bit, for now I'd stay with 64-bit only - please remember that after a discussion it was decided to compile only 64-bit executables "WITH_PIE".

Nov 15 2021, 5:33 PM · PowerPC, security, arm64
mw added a comment to D27666: Enable ASLR by default for 64-bit executables..
In D27666#744977, @kib wrote:

I might write are not changed at this time to suggest this is not necessarily a final decision (in fact, it's not really a decision at all, 32-bit is probably not relevant enough to spend much effort on).

For 32bit, it might make sense to enable ASLR for 32bit binaries on 64bit host, still. That said, i386 kernel provides almost full 4G for UVA, so it might make sense to enable there as well, but lets limit the change to 64bit kernels, indeed.

Nov 15 2021, 4:21 PM · PowerPC, security, arm64
kib added a comment to D27666: Enable ASLR by default for 64-bit executables..

I might write are not changed at this time to suggest this is not necessarily a final decision (in fact, it's not really a decision at all, 32-bit is probably not relevant enough to spend much effort on).

Nov 15 2021, 3:53 PM · PowerPC, security, arm64
mw added a comment to D27666: Enable ASLR by default for 64-bit executables..

As a result, although the tests on 32-bit architectures with ASLR enabled were
mostly on par with what was observed on 64-bit ones, the defaults for the
former are not changed. Also, for the sake of safety keep the feature disabled for 32-bit
executables on 64-bit machines, too.

I might write are not changed at this time to suggest this is not necessarily a final decision (in fact, it's not really a decision at all, 32-bit is probably not relevant enough to spend much effort on).

Nov 15 2021, 3:17 PM · PowerPC, security, arm64
mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 3:17 PM · PowerPC, security, arm64
emaste added a comment to D27666: Enable ASLR by default for 64-bit executables..

As a result, although the tests on 32-bit architectures with ASLR enabled were
mostly on par with what was observed on 64-bit ones, the defaults for the
former are not changed. Also, for the sake of safety keep the feature disabled for 32-bit
executables on 64-bit machines, too.

Nov 15 2021, 3:10 PM · PowerPC, security, arm64
mw added a comment to D27666: Enable ASLR by default for 64-bit executables..
In D27666#744905, @kib wrote:

Yes, leave it. I think it is verbose but explicit so that more people can notice that if pointed to.

Nov 15 2021, 2:53 PM · PowerPC, security, arm64
mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 2:52 PM · PowerPC, security, arm64
kib added a comment to D27666: Enable ASLR by default for 64-bit executables..

Yes, leave it. I think it is verbose but explicit so that more people can notice that if pointed to.

Nov 15 2021, 2:15 PM · PowerPC, security, arm64
mw added a comment to D27666: Enable ASLR by default for 64-bit executables..
In D27666#744903, @kib wrote:

I suggest also dropping the

In case any change in the OS behavior is observed, that can be possibly
caused by this patch, it is recommended to use freebsd-bugs@freebsd.org
mailing list for reporting and discussing the encountered issue. Also,

wording.

Nov 15 2021, 2:12 PM · PowerPC, security, arm64
kib added a comment to D27666: Enable ASLR by default for 64-bit executables..

I suggest also dropping the

In case any change in the OS behavior is observed, that can be possibly
caused by this patch, it is recommended to use freebsd-bugs@freebsd.org
mailing list for reporting and discussing the encountered issue. Also,

wording.

Nov 15 2021, 1:44 PM · PowerPC, security, arm64
mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 15 2021, 10:47 AM · PowerPC, security, arm64

Nov 12 2021

kib added a comment to D27666: Enable ASLR by default for 64-bit executables..

I think it is better to provide short and concise list of potential issues with ASLR, like this:

  • changed ABI due to modified layout of address space
  • address space fragmentation
  • non-reproducable address space layout between runs
  • harder debugging
  • some debuggers automatically disable ASLR for spawned targets, making target' environment different between debug and non-debug runs
Nov 12 2021, 7:50 PM · PowerPC, security, arm64
mw updated the summary of D27666: Enable ASLR by default for 64-bit executables..
Nov 12 2021, 7:28 PM · PowerPC, security, arm64

Nov 4 2021

mw updated the diff for D27666: Enable ASLR by default for 64-bit executables..

Limit setting of __elfN(pie_aslr_enabled) for only 64-bit PIE binaries.

Nov 4 2021, 3:42 PM · PowerPC, security, arm64

Nov 2 2021

br closed D24423: arm/pmu: add ACPI attachment.
Nov 2 2021, 7:51 PM · arm64
br updated the diff for D24423: arm/pmu: add ACPI attachment.

Fix typo.

Nov 2 2021, 7:30 PM · arm64
jrtc27 accepted D24423: arm/pmu: add ACPI attachment.

Typo to fix on commit but otherwise looks fine to me

Nov 2 2021, 7:16 PM · arm64
mw added inline comments to D27666: Enable ASLR by default for 64-bit executables..
Nov 2 2021, 5:18 PM · PowerPC, security, arm64
dgr_semihalf.com added inline comments to D27666: Enable ASLR by default for 64-bit executables..
Nov 2 2021, 4:06 PM · PowerPC, security, arm64
jhibbits requested review of D32804: Add a CPU reset hook to arm64.
Nov 2 2021, 2:33 PM · arm64

Nov 1 2021

mhorne accepted D24423: arm/pmu: add ACPI attachment.
Nov 1 2021, 5:43 PM · arm64

Oct 29 2021

mw added a comment to D27666: Enable ASLR by default for 64-bit executables..

Hi! Any comments/remarks to the updated version?

Oct 29 2021, 9:33 AM · PowerPC, security, arm64

Oct 27 2021

br updated the diff for D24423: arm/pmu: add ACPI attachment.

Collect all PPIs since they indeed could be different on different CPUs

Oct 27 2021, 8:13 PM · arm64
jrtc27 added a comment to D24423: arm/pmu: add ACPI attachment.

(Though we're not at all set up to be able to handle that if that's true...)

Oct 27 2021, 7:56 PM · arm64
jrtc27 added a comment to D24423: arm/pmu: add ACPI attachment.

I don't think there's any requirement that each CPU use the same PPI, unlike for the FDT bindings where that's an assumption made by both Linux and FreeBSD?

Oct 27 2021, 7:55 PM · arm64