Re: why no kernel randomization
Malte Gell <[email protected]> Fri, 16 Sep 2016 10:02:13 +0200
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
Am 15.09.2016 um 10:00 schrieb Malte Gell: > Am 15.09.2016 um 08:41 schrieb [email protected]: >> On Tue, Sep 13, 2016 at 07:17:34AM +0200, Malte Gell wrote: >>> why is the SUSE kernel built without CONFIG_RANDOMIZE_BASE? >> >> Have a look at >> http://bugzilla.suse.com/show_bug.cgi?id=998554 >> we enabled it in Tumbleweed, so we can test it there. > > Thanx, great! > I may test it with the Leap 42.1 kernel later this day/week. I can confirm suspend to RAM works perfectly with 42.1 and kernel randomization enabled. My machine suspends and wakes up fine. Though, I have not tested suspend to disk, since I don´t use that. But, STR is fine. My guess is, people complaining of broken suspend dont look at enabled wakeup events in /proc/acpi/wakeup! Happened to me first as well. I put this code in /etc/init.d/boot.local to make sure, after booting I have no wakeup events set: ENABLED=$(cat /proc/acpi/wakeup | grep enabled | cut -c1-4) for DISABLE in $ENABLED do echo $DISABLE > /proc/acpi/wakeup done # set exception for keyboard, make sure to use correct device like UHCx # echo UHC6 > /proc/acpi/wakeup Regards -- To unsubscribe, e-mail: [email protected] To contact the owner, e-mail: [email protected]