linux-kernel - Re: [PATCH 0/3] Patches to enable chroot for all users

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <5149D737.6080409@schaufler-ca.com>
Date:	Wed, 20 Mar 2013 08:35:19 -0700
From:	Casey Schaufler <casey@...aufler-ca.com>
To:	tal.tchwella@...il.com
CC:	linux-kernel@...r.kernel.org, tchwella@....edu,
	Casey Schaufler <casey@...aufler-ca.com>
Subject: Re: [PATCH 0/3] Patches to enable chroot for all users

On 3/20/2013 6:09 AM, tal.tchwella@...il.com wrote:
> From: Tal Tchwella <tchwella@....edu>
>
> I want to suggest adding chroot capability to all users.

It is much too easy to create an environment for
tricking privileged programs using chroot to allow
unprivileged processes to use chroot. /etc/shadow
is your trivial attack surface.

> The following patches enable that capability, while considering the security mechanism needed to disable escape routes for chroots by non-root users,
> and keeping chroot backward-compatible for root users.
> The first patch establishes the concept of multi-user chroot, while disabling checks for root user in the chroot process.
> The second patch checks whether a fd that is sent to a chroot application by a non-root user refers to a directory. 
> If that is the case, that fd is skipped, to disable an escape route. 
> The third patch disables the option for applications that have open fds to directories to be chrooted by a non-root user.
>
> These patches were applied and test on linux-kernel 3.2.0-31-generic.
>
> Any comments, feedback and suggestions are appreciated!
>
> Thanks,
> Tal
>
>
> Tal Tchwella (3):
>   enabled chroot for all users
>   socket checks for uds fds transfer
>   open fds check when starting chroot
>
>  fs/exec.c             |    3 +++
>  fs/open.c             |   32 ++++++++++++++++++++++++++++++--
>  include/linux/sched.h |   12 ++++++++++++
>  init/main.c           |    1 +
>  kernel/fork.c         |    2 ++
>  net/core/scm.c        |    9 +++++++++
>  6 files changed, 57 insertions(+), 2 deletions(-)
>

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/