Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Nov 2023 14:41:45 -0700
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        sahil patidar <sahilpatidar60@gmail.com>
Cc:        hackers@freebsd.org
Subject:   Re: kernel control flow integrity (kcfi)
Message-ID:  <20231130214145.a5hfw4k36yljayoo@mutt-hbsd>
In-Reply-To: <CAE-x4DF3_5x1phxqc9e5oTiLs=AHD4ZLJOetsX9yHDAQht39Dg@mail.gmail.com>
References:  <CAE-x4DF3_5x1phxqc9e5oTiLs=AHD4ZLJOetsX9yHDAQht39Dg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
On Tue, Jan 10, 2023 at 11:48:43AM +0530, sahil patidar wrote:
> hello Hackers,
> I want to work on the Freebsd idealist project KCFI (kernel control
> flow integrity), I am new in this community and want to be involved in
> the Freebsd community and become a contributor.
> so I want to know if this project is already done or if someone is
> working on it.
> if no one working on this project so how can I start work on this project?
> I am interested in compiler or kernel dev.

Hey Sahil,

For the past few years, I've slowly been working on Cross-DSO CFI in
HardenedBSD's base userland. I've recently started looking at applying
kCFI to the kernel.

When compiling/linking kernel modules with -fsanitize=kcfi, ld.lld
emits relocation entries that are not supported by the ELF loader in
the kernel. Implementing support for the relocation type
R_X86_64_REX_GOTPCRELX would be a good first step.

I'm a little unsure what needs to happen after implementing support
for that relocation type. But, either way, I'm hoping to find out here
soon. :-)

I'm pretty early on in my research for kCFI integration. I'm curious
if you have made progress and if you have any additional insight.

Thanks,

-- 
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmVpAZMACgkQ/y5nonf4
4frqeg/6AvYv72c0eC9J4G/v+NPpqtHK1H3Equm49m1W2D3LPD+j0kkLLdcmxUG8
eEwecUqHdakZuH49uD3q/L7T45UHveIkOUpYJyCoooRhPlPcxR0Sb42xD2m1sbsf
axwrpmwWLE2uUQAqxBTEyl2cqdGhGiipobyVqI0psIQLh66krip8Z+R2DP1g+qaE
IV9VaXQvSiY2YPWdXhv/GxZazeKOr/4Mk2tg4VP/9wejW1ctvFIZOYDNoO98qme4
B0w+vm0LT44mjUyzlhAnD2M0iNEKcQY6g1+1Y+a+8uelwCpywtaVoqd1fAdr2Ls+
12RiETZsGe2mSjaSsMzAIy36WCPM624THw6tYXrp+vY30I37KvTrNjnthFRPpz9v
vAwL3qi1N4Jl3kXFejCznEliiBN55rUJoWhfq0B3yJUVeSicjzoE7AqThI3Kn7KX
ExO/jpIlRnuBdwd0GvBmmVl5QWxOr75bV63yLESLwG5AbxihSTUfoQS1Ryj1wW//
OzsUWyTvyUXEnEu6IgB7niNlF89hgKj6i6Lo0BYm5nAUJYbNqV0a1hVbQF8FX/Ok
olYslsaO6GcT5pPDUhT+/cRkWZys5W1EULqW9JV9JZPCNhz7IAz2LZpelcUDlBo3
9J+nkPboLzFiNA2FuNHc78i9izu9Vd+hEFMk0ly3aQ0o/z3jZ9Y=
=1eCE
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20231130214145.a5hfw4k36yljayoo>