Re: [PATCH] kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline

[Dave Young]

On 04/17/17 at 09:56pm, Baoquan He wrote:
>  KASLR is to enhance security on OS kernel. While kdump kernel is
>  working after normal kernel corrupted. There's no need to do kaslr
>  in kdump kernel, so add 'nokaslr' to disable kaslr.
>  
>  Signed-off-by: Baoquan He <bhe(a)redhat.com&gt;
>  ---
>   kdump.sysconfig.x86_64 | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>  
>  diff --git a/kdump.sysconfig.x86_64 b/kdump.sysconfig.x86_64
>  index d4e26f5..f269d02 100644
>  --- a/kdump.sysconfig.x86_64
>  +++ b/kdump.sysconfig.x86_64
>  @@ -21,7 +21,7 @@ KDUMP_COMMANDLINE_REMOVE="hugepages hugepagesz slub_debug
> quiet"
>   
>   # This variable lets us append arguments to the current kdump commandline
>   # after processed by KDUMP_COMMANDLINE_REMOVE
>  -KDUMP_COMMANDLINE_APPEND="irqpoll nr_cpus=1 reset_devices cgroup_disable=memory
> mce=off numa=off udev.children-max=2 panic=10 rootflags=nofail acpi_no_memhotplug
> transparent_hugepage=never"
>  +KDUMP_COMMANDLINE_APPEND="irqpoll nr_cpus=1 reset_devices cgroup_disable=memory
> mce=off numa=off udev.children-max=2 panic=10 rootflags=nofail acpi_no_memhotplug
> transparent_hugepage=never nokaslr"
>   
>   # Any additional kexec arguments required.  In most situations, this should
>   # be left empty
>  -- 
>  2.5.5
>  _______________________________________________
>  kexec mailing list -- kexec(a)lists.fedoraproject.org
>  To unsubscribe send an email to kexec-leave(a)lists.fedoraproject.org 
Acked-by: Dave Young <dyoung(a)redhat.com&gt;

Thanks
Dave