linux-kernel - [PATCH tip/core/rcu 0/7] Security-related list changes for 4.10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20161114175500.GA21637@linux.vnet.ibm.com>
Date:   Mon, 14 Nov 2016 09:55:00 -0800
From:   "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>
To:     linux-kernel@...r.kernel.org
Cc:     mingo@...nel.org, jiangshanlai@...il.com, dipankar@...ibm.com,
        akpm@...ux-foundation.org, mathieu.desnoyers@...icios.com,
        josh@...htriplett.org, tglx@...utronix.de, peterz@...radead.org,
        rostedt@...dmis.org, dhowells@...hat.com, edumazet@...gle.com,
        dvhart@...ux.intel.com, fweisbec@...il.com, oleg@...hat.com,
        bobby.prani@...il.com
Subject: [PATCH tip/core/rcu 0/7] Security-related list changes for 4.10

Hello!

This series contains security-related list changes, some of which stems
in part from PaX and Grsecurity work:

1.	Split __list_add() debug checks into a separate functions,
	courtesy of Kees Cook.

2.	Consolidate DEBUG_LIST() for list_add_rcu(), courtesy of Kees Cook.

3.	Split list_del() debug checking into separate function, courtesy
	of Kees Cook.

4.	Provide toggle for BUG() on data corruption, so that people who
	care more about security than uptime can crash their machines
	in the face of list data corruption, courtesy of Kees Cook.

	Note that CHECK_DATA_CORRUPTION() contains unconventional control
	flow, however, this is intended and is used correctly.

5.	Add tests for list corruption, courtesy of Kees Cook.

6.	Fix typo in "select" Kconfig statement in #4 above, courtesy
	of Valentin Rothberg.

7.	Avoid Kconfig warning from CONFIG_DEBUG_LIST from #4 above,
	courtesy of Arnd Bergmann.

							Thanx, Paul

------------------------------------------------------------------------

 drivers/misc/lkdtm.h      |    2 
 drivers/misc/lkdtm_bugs.c |   68 +++++++++++++++++
 drivers/misc/lkdtm_core.c |    2 
 include/linux/bug.h       |   17 ++++
 include/linux/list.h      |   37 ++++++---
 include/linux/rculist.h   |    8 --
 lib/Kconfig.debug         |   14 +++
 lib/list_debug.c          |  177 +++++++++++++++++-----------------------------
 8 files changed, 197 insertions(+), 128 deletions(-)