linux-kernel - Re: [PATCH 1/1] Smack:- Fix the issue of wrong info printed in ptrace error logs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <0163902a-a442-7e43-8f73-5321109e8985@schaufler-ca.com>
Date:   Tue, 21 Dec 2021 09:01:04 -0800
From:   Casey Schaufler <casey@...aufler-ca.com>
To:     vishal.goel@...sung.com,
        "linux-security-module@...r.kernel.org" 
        <linux-security-module@...r.kernel.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Cc:     AMIT SAHRAWAT <a.sahrawat@...sung.com>,
        Vaneet Narang <v.narang@...sung.com>,
        "linux-audit@...hat.com" <linux-audit@...hat.com>,
        Casey Schaufler <casey@...aufler-ca.com>
Subject: Re: [PATCH 1/1] Smack:- Fix the issue of wrong info printed in ptrace
 error logs

On 12/21/2021 5:12 AM, Vishal Goel wrote:
> Hi,
>
>>>> Signed-off-by: Vishal Goel <vishal.goel@...sung.com>
>> What test case do you have that generates these records?

Could you include a permissive license with this code?
I'd like to add it or a derivative of it to the Smack test suite.

> Test case for 1st log:-
> void main(int argc,char *argv[])
> {
>          int pid;
>
>          if (argc < 2) {
>                  printf("enter pid of the tracee process\n");
>                  exit(0);
>          }
>
>          pid = atoi(argv[1]);
>          fprintf(stderr,"Inside\n");
>          ptrace(PTRACE_ATTACH, pid,NULL,NULL);
>          while(1)
>          {
>                  sleep(10);
>          }
> }
>
> Test case for 2nd log:-
> void main(int argc,char *argv[])
> {
>          int pid;
>
>          pid = getpid();
>          fprintf(stderr,"Inside\n");
>          ptrace(PTRACE_TRACEME, pid,NULL,NULL);
>          while(1)
>          {
>                 sleep(10);
>          }
> }
>
> Test case for 3rd log:-
> void main()
> {
>          int pid;
>          char *argv[2];
>
>          fprintf(stderr,"Inside\n");
>          pid = fork();
>          if(pid == 0) {
>                  argv[0] = "/tst_pt";
>                  argv[1] = NULL;
>
>                  if(ptrace(PTRACE_TRACEME, pid,NULL,NULL))
>                          printf("attached child\n");
>
>                  printf("going for exec\n");
>                  execv("/tst_pt",argv);
>          }
>          else
>          {
>                  while(1)
>                  {
>                          sleep(10);
>                  }
>          }
> }
>
>>> Added linux-audit to the CC list.
>>>
> Thanks
> Vishal Goel