linux-kernel - Re: syscall: introduce sendfd() syscall (v.2)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20141207095529.GA18733@amd>
Date:	Sun, 7 Dec 2014 10:55:29 +0100
From:	Pavel Machek <pavel@....cz>
To:	One Thousand Gnomes <gnomes@...rguk.ukuu.org.uk>
Cc:	Alex Dubov <alex.dubov@...il.com>, linux-kernel@...r.kernel.org,
	viro@...iv.linux.org.uk, corbet@....net, richardcochran@...il.com
Subject: Re: syscall: introduce sendfd() syscall (v.2)

On Fri 2014-12-05 13:22:50, One Thousand Gnomes wrote:
> 
> > 2.a. If task A has sufficient capabilities to send signals to task B, then
> > task A is already in position to do anything it wants with task B, including
> > killing it outright.
> 
> Not entirely true.
> 
> - We have securirty models like SELinux
> - We have namespaces and being able to send an fd between namespaces is
>   not quite as flexible as you would make it
> 
> I suspect therefore it needs security hooks but otherwise looks more sane
> than the current AF_UNIX approach.

The right test for "can do anything" is "can_ptrace()"...
									Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/