Linker runs everytime i boot the system up, I have already installed
the 7.1 syspatch and relinked the kernel. What is going on?
reddit / BSD

----------------------------------------------------------------------
rdcldrmr · 2022-06-01 17:18

Kernel relinking happens at startup on OpenBSD as a security measure.
It's called KARL: https://marc.info/?l=openbsd-tech&m=149732026405941

----------------------------------------------------------------------
jggimi · 2022-06-01 20:41

You asked this same question [three weeks
ago](http://daemonforums.org/showthread.php?t=12070).  If you didn't
understand my answer, you could have asked a follow-up question there.

----------------------------------------------------------------------
jantari · 2022-06-01 20:51

This is normal in modern OS due to KASLR

----------------------------------------------------------------------
rdcldrmr · 2022-06-01 20:58

It's not KASLR.

----------------------------------------------------------------------
zielonykid1234 · 2022-06-01 21:28

how to disable KARL then?

----------------------------------------------------------------------
zielonykid1234 · 2022-06-01 21:29

shit i forgor💀

----------------------------------------------------------------------
rdcldrmr · 2022-06-01 21:35

I'm not going to help you shoot yourself in the foot.

May as well use FreeBSD if you don't want exploit mitigations.

----------------------------------------------------------------------
zielonykid1234 · 2022-06-01 21:40

alright, thanks sir. I will keep KARL in my computer i guess.

----------------------------------------------------------------------
jggimi · 2022-06-01 22:20

OK.  That was the second time I'd answered the question for you.
There is a link in the reply to a prior post where you'd asked about
kernel re-linking -- and I'd answered -- previously.

Hopefully, now, three times is the charm, and you won't need to ask a
fourth time.

----------------------------------------------------------------------
oldhag49 · 2022-06-02 03:49

It's a security feature, by changing the addresses of the symbols
within libraries at boot time it mitigates a certain class of exploits
that rely on those symbols being in predictable places.

So, for example, if there's a vulnerability that crops up that enables
remote code execution by changing a pointer to a known entry point to
a library.. it won't work, because the hacker won't know where on
*your* system the entry point is.

You should only disable it if you know exactly why it's there and you
have a specific reason for it.

----------------------------------------------------------------------
jantari · 2022-06-02 05:17

You're right I sometimes confuse them. But to be fair KARL is like the
evolution of KASLR

----------------------------------------------------------------------
zielonykid1234 · 2022-06-09 05:21

why tf do i need this on desktop?

----------------------------------------------------------------------
zielonykid1234 · 2022-06-09 05:22

bro I wont forgor next time i ask something