linux-kernel - Re: mprotect abuse in slim

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20070109094625.GA11918@infradead.org>
Date:	Tue, 9 Jan 2007 09:46:25 +0000
From:	Christoph Hellwig <hch@...radead.org>
To:	Arjan van de Ven <arjan@...radead.org>
Cc:	Mimi Zohar <zohar@...ibm.com>,
	Christoph Hellwig <hch@...radead.org>, akpm@...l.org,
	kjhall@...ux.vnet.ibm.com, linux-kernel@...r.kernel.org,
	safford@...son.ibm.com
Subject: Re: mprotect abuse in slim

On Mon, Jan 08, 2007 at 07:07:25PM -0800, Arjan van de Ven wrote:
> 
> > Starting with the fdtable, would it help if we move the 
> > fdtable tweaking out of slim itself and into helpers?  Or
> > can you recommend another way to implement this functionality.
> 
> Hi,
> 
> maybe this is a silly question, but do you revoke not only the current
> fd entries, but also the ones that are pending in UNIX domain sockets
> and that are already being sent to the process? If not.. then you might
> as well not bother ;)

Exactly.  What these folks want is revoke (maybe more fine grained, but
that's not the point).  And guess what folks, revoke is not trivial,
otherwise we'd have it.  If you want to volunteer to implement a full-blown
revoke that's fine, but

  a) it belongs into core code
  b) needs to be done right

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/