Skip to content

Commit 6f6ef57

Browse files
committed
Add KASLR option, make nokaslr default, refactor kernel cmdline variables
1 parent 7f19e60 commit 6f6ef57

File tree

1 file changed

+17
-7
lines changed

1 file changed

+17
-7
lines changed

Makefile

+17-7
Original file line numberDiff line numberDiff line change
@@ -335,6 +335,9 @@ QEMU_KERNEL_IMAGE ?= $(KERNEL_IMAGE)
335335
ECHR ?= 1
336336
ROOT ?= /dev/vda
337337
RW ?= rw
338+
KASLR ?= 0
339+
340+
QEMU_KERNEL_CMDLINE := selinux=0
338341

339342
QEMU_ARGS := \
340343
-m $(MEM) \
@@ -351,11 +354,11 @@ ifneq ($(INITRD),)
351354
ifeq ($(INITRD),1)
352355
INITRD := $(CPIO_FILE)
353356
endif
354-
QEMU_EXTRA_KERNEL_CMDLINE += rdinit=$(RDINIT)
357+
QEMU_KERNEL_CMDLINE += rdinit=$(RDINIT)
355358
QEMU_ARGS += -initrd $(INITRD)
356359
else
357360
QEMU_ARGS += -drive file=$(ROOTFS),if=virtio,format=$(ROOTFS_FORMAT)
358-
QEMU_EXTRA_KERNEL_CMDLINE += root=$(ROOT) $(RW)
361+
QEMU_KERNEL_CMDLINE += root=$(ROOT) $(RW)
359362
endif
360363

361364
ifeq ($(GDB),1)
@@ -364,9 +367,9 @@ endif
364367

365368
ifeq ($(ARCH),x86_64)
366369
QEMU_BIN := qemu-system-x86_64
367-
QEMU_ARGS += \
368-
-cpu kvm64,+smep,+smap \
369-
-append "console=ttyS0 selinux=0 kpti no5lvl $(QEMU_EXTRA_KERNEL_CMDLINE)"
370+
QEMU_KERNEL_CMDLINE += console=ttyS0 kpti no5lvl
371+
372+
QEMU_ARGS += -cpu kvm64,+smep,+smap
370373

371374
# We can't use KVM with GitHub Actions CI
372375
ifneq ($(CI),true)
@@ -375,13 +378,20 @@ ifeq ($(ARCH),x86_64)
375378

376379
else
377380
QEMU_BIN := qemu-system-aarch64
381+
QEMU_KERNEL_CMDLINE += console=ttyAMA0
382+
378383
QEMU_ARGS += \
379384
-M virt \
380385
-cpu cortex-a53 \
381-
-semihosting-config enable=on,target=native \
382-
-append "console=ttyAMA0 selinux=0 $(QEMU_EXTRA_KERNEL_CMDLINE)"
386+
-semihosting-config enable=on,target=native
383387
endif
384388

389+
ifeq ($(KASLR),0)
390+
QEMU_KERNEL_CMDLINE += nokaslr
391+
endif
392+
393+
QEMU_ARGS += -append "$(QEMU_KERNEL_CMDLINE) $(QEMU_EXTRA_KERNEL_CMDLINE)"
394+
385395
RUN_DEPS := $(QEMU_KERNEL_IMAGE)
386396

387397
.PHONY: run

0 commit comments

Comments
 (0)