lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 24 Dec 2009 14:51:19 +0900 From: Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp> To: sam@...ack.fr Cc: alan@...rguk.ukuu.org.uk, linux-kernel@...r.kernel.org, netdev@...r.kernel.org, linux-security-module@...r.kernel.org, andi@...stfloor.org, david@...g.hm, socketcan@...tkopp.net, herbert@...dor.apana.org.au, Valdis.Kletnieks@...edu, bdonlan@...il.com, zbr@...emap.net, cscott@...ott.net, jmorris@...ei.org, ebiederm@...ssion.com, bernie@...ewiz.org, mrs@...hic-beasts.com, randy.dunlap@...cle.com, xiyou.wangcong@...il.com, michael@...top.org Subject: Re: [PATCH 1/3] Security: Add prctl(PR_{GET,SET}_NETWORK) interface. (v3) Samir Bellabes wrote: > > diff --git a/include/linux/sched.h b/include/linux/sched.h > > index f2f842d..0c65c55 100644 > > --- a/include/linux/sched.h > > +++ b/include/linux/sched.h > > @@ -1402,6 +1402,8 @@ struct task_struct { > > unsigned int sessionid; > > #endif > > seccomp_t seccomp; > > +/* Flags for limiting networking via prctl(PR_SET_NETWORK). */ > > + unsigned long network; > > > > /* Thread group tracking */ > > u32 parent_exec_id; > > I think this is unnecessary, as LSM module, you should use the > void* security member of the structure cred. > > this member allows you to mark task_struct as you which, it's a kind of > abstraction provided to all security modules. I want to use per task_struct variable. Since cred is copy-on-write, we have to use kmalloc()/kfree() whenever we modify variable in cred. That introduces unnwanted error paths (i.e. memory allocation failure) and overhead. Old version of TOMOYO had similar mechanism that allows userland programs to disable specific operations (disable chroot(), disable execve(), disable mount() etc. ; which is different from POSIX capabilities). I added "unsigned int dropped_capability;" to task_struct for implementing it. Adding variables to task_struct makes it possible to error-path-free. I prefer adding "void *security;" to task_struct which is duplicated upon fork() and released upon exit(). -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists