linux-kernel - Re: mprotect abuse in slim

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 9 Jan 2007 16:45:51 -0500
From:	Mimi Zohar <zohar@...ibm.com>
To:	Valdis.Kletnieks@...edu
Cc:	akpm@...l.org, Christoph Hellwig <hch@...radead.org>,
	kjhall@...ux.vnet.ibm.com, linux-kernel@...r.kernel.org,
	safford@...son.ibm.com
Subject: Re: mprotect abuse in slim

Valdis.Kletnieks@...edu wrote on 01/09/2007 02:27:19 PM:

>Which, unfortunately, creates incredibly brittle code when some attacker
>reads the SLIM source code and finds a way to force the non-simple case
>you ignore.
> 
>This is an area where you really need to do it *right*, or not at all.

For the non-simple case, it isn't that we 'ignore' the revocation,
but we prevent the cause for demotion to occur.  The current status is
that for those cases we can revoke, we demote the process and do the
revocation, and for those cases which we can't revoke, we prevent the 
process from being demoted.

Mimi Zohar
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/