CONFIG_KUSER_HELPERS: Enable kuser helpers page for 32-bit applications

General informations

The Linux kernel configuration item CONFIG_KUSER_HELPERS has multiple definitions:

Enable kuser helpers page for 32-bit applications found in arch/arm64/Kconfig

The configuration item CONFIG_KUSER_HELPERS:

• prompt: Enable kuser helpers page for 32-bit applications
• type: bool
• depends on: (none)
• defined in arch/arm64/Kconfig
• found in Linux kernels: 5.4–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

Warning: disabling this option may break 32-bit user programs.

Provide kuser helpers to compat tasks. The kernel provides helper code to userspace in read only form at a fixed location to allow userspace to be independent of the CPU type fitted to the system. This permits binaries to be run on ARMv4 through to ARMv8 without modification.

See Documentation/arch/arm/kernel_user_helpers.rst for details.

However, the fixed address nature of these helpers can be used by ROP (return orientated programming) authors when creating exploits.

If all of the binaries and libraries which run on your platform are built specifically for your platform, and make no use of these helpers, then you can turn this option off to hinder such exploits. However, in that case, if a binary or library relying on those helpers is run, it will not function correctly.

Say N here only if you are absolutely certain that you do not need these helpers; otherwise, the safe option is to say Y.

Enable kuser helpers in vector page found in arch/arm/mm/Kconfig

The configuration item CONFIG_KUSER_HELPERS:

• prompt: Enable kuser helpers in vector page
• type: bool
• depends on: (! CONFIG_NEED_KUSER_HELPERS ) && ( CONFIG_MMU )
• defined in arch/arm/mm/Kconfig
• found in Linux kernels: 3.11–3.19, 4.0–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

Warning: disabling this option may break user programs.

Provide kuser helpers in the vector page. The kernel provides helper code to userspace in read only form at a fixed location in the high vector page to allow userspace to be independent of the CPU type fitted to the system. This permits binaries to be run on ARMv4 through to ARMv7 without modification.

See Documentation/arch/arm/kernel_user_helpers.rst for details.

However, the fixed address nature of these helpers can be used by ROP (return orientated programming) authors when creating exploits.

If all of the binaries and libraries which run on your platform are built specifically for your platform, and make no use of these helpers, then you can turn this option off to hinder such exploits. However, in that case, if a binary or library relying on those helpers is run, it will receive a SIGILL signal, which will terminate the program.

Say N here only if you are absolutely certain that you do not need these helpers; otherwise, the safe option is to say Y.

Enable kuser helpers page for 32 bit applications found in arch/arm64/Kconfig

The configuration item CONFIG_KUSER_HELPERS:

• prompt: Enable kuser helpers page for 32 bit applications
• type: bool
• depends on: (none)
• defined in arch/arm64/Kconfig
• found in Linux kernels: 5.2–5.3

Help text

Warning: disabling this option may break 32-bit user programs.

Provide kuser helpers to compat tasks. The kernel provides helper code to userspace in read only form at a fixed location to allow userspace to be independent of the CPU type fitted to the system. This permits binaries to be run on ARMv4 through to ARMv8 without modification.

See Documentation/arm/kernel_user_helpers.rst for details.

However, the fixed address nature of these helpers can be used by ROP (return orientated programming) authors when creating exploits.

If all of the binaries and libraries which run on your platform are built specifically for your platform, and make no use of these helpers, then you can turn this option off to hinder such exploits. However, in that case, if a binary or library relying on those helpers is run, it will not function correctly.

Say N here only if you are absolutely certain that you do not need these helpers; otherwise, the safe option is to say Y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: