+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: OpenBSD Will Get Unique Kernels On Each Reboot (/Thread-OpenBSD-Will-Get-Unique-Kernels-On-Each-Reboot)
OpenBSD Will Get Unique Kernels On Each Reboot - Ecks - 07-07-2017
A new feature added in test snapshots for the upcoming OpenBSD 6.2 release will create a unique kernel every time an OpenBSD user reboots or upgrades his computer. This feature is named KARL (Kernel Address Randomized Link) and works by relinking internal kernel files in a random order so that it generates a unique kernel binary blob every time. Currently, for stable releases, the OpenBSD kernel uses a predefined order to link and load internal files inside the kernel binary, resulting in the same kernel for all users. Developed by Theo de Raadt, KARL will work by generating a new kernel binary at install, upgrade, and boot time. If the user boots up, upgrades, or reboots his machine, the most recently generated kernel will replace the existing kernel binary, and the OS will generate a new kernel binary that will be used on the next boot/upgrade/reboot, constantly rotating kernels on reboots or upgrades. KARL should not be confused with ASLR (Address Space Layout Randomization) a technique that randomizes the memory address where application code is executed, so exploits can't target a specific area of memory where an application or the kernel is known to run. A similar technique exists for randomizing the memory location where the kernel loads called KASLR. The difference between the two is that KARL loads a different kernel binary in the same place, while KASLR loads the same binary in random locations. Currently Linux and Windows only support KASLR.
Learn More @ https://www.bleepingcomputer.com/news/security/openbsd-will-get-unique-kernels-on-each-reboot-do-you-hear-that-linux-windows/
RE: OpenBSD Will Get Unique Kernels On Each Reboot - Blink - 07-07-2017
Sounds great.
I really want to start using OpenBSD, I need to figure out if I can make it rolling like with Debian. (can someone lemme know about this?)
RE: OpenBSD Will Get Unique Kernels On Each Reboot - zorrophreak - 07-07-2017
Very interesting, is it planned to be put into main release? I would be a little worried of potential difficulties with kernel verification on systems that use it, might brake it, who knows?