3 ms·
Wouldn’t directly linking system calls make every address space more unique and thus make it harder to write (generic) exploits for?
by heavenlyblue 6y ago
Wouldn’t directly linking system calls make every address space more unique and thus make it harder to write (generic) exploits for?
- rwmj 6y agoThe typical problem is that you end up distributing (eg) Apache 2.4.99 compiled for Unikernel on x86-64 via Red Hat Network to a million customers and they're all running the same binary. ASLR helps here ...
- cma 6y agoWith full privilege I think you could directly write to hardware dma locations and look them up in the mmu, etc.