| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 6 Jun 2012 10:54:59 +0930 From: Christopher Yeoh <cyeoh@....ibm.com> To: Borislav Petkov <bp@...64.org> Cc: Andrew Morton <akpm@...ux-foundation.org>, Linus Torvalds <torvalds@...ux-foundation.org>, LKML <linux-kernel@...r.kernel.org>, Randy Dunlap <rdunlap@...otime.net> Subject: Re: [PATCH] CMA: Do no enable it by default On Tue, 5 Jun 2012 13:05:41 +0200 Borislav Petkov <bp@...64.org> wrote: > > CROSS_MEMORY_ATTACH is a MPI feature which shouldn't be enabled by > default on every linux system simply because the majority of users do > not need it. btw although CMA was primarily written for MPI it is used by more than just MPI implementations. For example, recent versions of strace now use it instead of PTRACE_PEEKDATA if its available: http://article.gmane.org/gmane.comp.sysutils.strace.devel/2467/match=process_vm_readv > Besides, in the config option it says "... which allow a process with > the correct privileges to directly read from or write to to another > process's address space.", which, if the reading process has somehow > gained privileges (as that never happens) is your security issue right > there. The privileges required are exactly the same as required to ptrace the target. You're rather stuffed anyway if you have a hostile process with those privileges. Regards, Chris -- cyeoh@...ibm.com -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists