linux-kernel - Re: Syslets, signals, and security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 4 Jun 2007 23:44:53 +0100
From:	Alan Cox <alan@...rguk.ukuu.org.uk>
To:	Andi Kleen <andi@...stfloor.org>
Cc:	Jeff Dike <jdike@...toit.com>, Zach Brown <zach.brown@...cle.com>,
	Ingo Molnar <mingo@...e.hu>,
	LKML <linux-kernel@...r.kernel.org>
Subject: Re: Syslets, signals, and security

> The problem is that you would need to reference count/lock them in every
> syscall or ioctl or similar. Otherwise another thread
> could change them in the middle of a syscall which wouldn't be
> good. Doing this full reference counting would be probably somewhat
> expensive with more locked cycles and also a lot of work to implement.
> You would need to audit large parts of the source tree.

It also mucks up the rather more powerful existing behaviour unless we
make the changing optional in which case it gets *really ugly*

> I don't think it's a good idea.

Ditto (and glibc handles it for userspace posix APIs)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/