linux-hardening - Re: [PATCH] exec: Add comments on check_unsafe

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20221019113518.tmbuflcinmcy5uk2@wittgenstein>
Date:   Wed, 19 Oct 2022 13:35:18 +0200
From:   Christian Brauner <brauner@...nel.org>
To:     Kees Cook <keescook@...omium.org>
Cc:     Eric Biederman <ebiederm@...ssion.com>,
        linux-fsdevel@...r.kernel.org, Jann Horn <jannh@...gle.com>,
        Andy Lutomirski <luto@...nel.org>,
        David Laight <David.Laight@...LAB.COM>,
        linux-kernel@...r.kernel.org, linux-hardening@...r.kernel.org
Subject: Re: [PATCH] exec: Add comments on check_unsafe_exec() fs counting

On Tue, Oct 18, 2022 at 12:17:24AM -0700, Kees Cook wrote:
> Add some comments about what the fs counting is doing in
> check_unsafe_exec() and how it relates to the call graph.
> Specifically, we can't force an unshare of the fs because
> of at least Chrome:
> https://lore.kernel.org/lkml/86CE201B-5632-4BB7-BCF6-7CB2C2895409@chromium.org/
> 
> Cc: Eric Biederman <ebiederm@...ssion.com>
> Cc: linux-fsdevel@...r.kernel.org
> Signed-off-by: Kees Cook <keescook@...omium.org>
> ---

Acked-by: Christian Brauner (Microsoft) <brauner@...nel.org>