linux-kernel - Re: [ 008/102] ARM: make vectors page inaccessible from userspace

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130809044620.GA10681@kroah.com>
Date:	Thu, 8 Aug 2013 21:46:20 -0700
From:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:	Stefan Lippers-Hollmann <s.L-H@....de>
Cc:	linux-kernel@...r.kernel.org, stable@...r.kernel.org,
	Russell King <rmk+kernel@....linux.org.uk>
Subject: Re: [ 008/102] ARM: make vectors page inaccessible from userspace

On Fri, Aug 09, 2013 at 06:29:17AM +0200, Stefan Lippers-Hollmann wrote:
> On Friday 09 August 2013, Greg Kroah-Hartman wrote:
> > 3.10-stable review patch.  If anyone has any objections, please let me know.
> > 
> > ------------------
> > 
> > From: Russell King <rmk+kernel@....linux.org.uk>
> > 
> > commit a5463cd3435475386cbbe7b06e01292ac169d36f upstream.
> > 
> > If kuser helpers are not provided by the kernel, disable user access to
> > the vectors page.  With the kuser helpers gone, there is no reason for
> > this page to be visible to userspace.
> > 
> > Signed-off-by: Russell King <rmk+kernel@....linux.org.uk>
> > Signed-off-by: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
> 
> 
> If I read Russell King's response in 
> 
> 	http://www.spinics.net/lists/stable/msg16792.html
> 	Message-ID: <20130804105241.GG23006@...00.arm.linux.org.uk>
> 
> correctly, this patch might not be wanted for -stable; this only 
> affects queue-3.10 at the moment.

Yes, I know there's a build warning/error here, but it only affects no
mmu systems, right?  I'll pick up the fix that hits Linus's tree for
this when it gets there.

thanks,

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/