lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <YeITMG7bKozB2xVQ@bombadil.infradead.org>
Date:   Fri, 14 Jan 2022 16:20:00 -0800
From:   Luis Chamberlain <mcgrof@...nel.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     Jessica Yu <jeyu@...nel.org>,
        Colin Ian King <colin.king@...el.com>,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        Dmitry Torokhov <dmitry.torokhov@...il.com>,
        Yu Chen <chen.yu@...ystack.cn>, linux-kernel@...r.kernel.org,
        linux-modules@...r.kernel.org, mcgrof@...nel.org
Subject: Modules updates for v5.17-rc1

Hi Linus,

Here are the modules changes for v5.17-rc1. This is my second pull
request to you, the first one was for v5.16-rc1. Hopefully this time
around this all looks good now, otherwise please let me know and I'll
be sure to tidy up more.

The following changes since commit daadb3bd0e8d3e317e36bc2c1542e86c528665e5:

  Merge tag 'locking_core_for_v5.17_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip (2022-01-11 17:24:45 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/linux.git modules-next

for you to fetch changes up to a97ac8cb24a3c3ad74794adb83717ef1605d1b47:

  module: fix signature check failures when using in-kernel decompression (2022-01-14 09:40:49 -0800)

----------------------------------------------------------------
Colin Ian King (1):
      kernel: Fix spelling mistake "compresser" -> "compressor"

Dmitry Torokhov (2):
      module: add in-kernel support for decompressing
      module: fix signature check failures when using in-kernel decompression

Greg Kroah-Hartman (1):
      module.h: allow #define strings to work with MODULE_IMPORT_NS

Jessica Yu (1):
      MAINTAINERS: Remove myself as modules maintainer

Luis Chamberlain (1):
      MAINTAINERS: add mailing lists for kmod and modules

Yu Chen (1):
      module: Remove outdated comment

 MAINTAINERS                 |   6 +-
 include/linux/module.h      |   3 +-
 include/uapi/linux/module.h |   1 +
 init/Kconfig                |  13 +++
 kernel/Makefile             |   1 +
 kernel/module-internal.h    |  19 ++++
 kernel/module.c             |  45 +++++---
 kernel/module_decompress.c  | 271 ++++++++++++++++++++++++++++++++++++++++++++
 8 files changed, 340 insertions(+), 19 deletions(-)
 create mode 100644 kernel/module_decompress.c

----------------------------------------------------------------

modules changes for v5.17-rc1

The biggest change here is in-kernel support for module decompression.
This change is being made to help support LSMs like LoadPin as otherwise
it loses link between the source of kernel module on the disk and binary
blob that is being loaded into the kernel.

kmod decompression is still done by userspace even with this is done,
both because there are no measurable gains in not doing so and as it
adds a secondary extra check for validating the module before loading it
into the kernel.

Although this change was only merged on January 11th, the patches have
been being reviewed since early december. There was at least one fix
already found for it and merged.

The rest of the changes are minor, the only other change worth mentionin
there is Jessica Yu is now bowing out of maintenance of modules as she's
taking a break from work.

While there were other changes posted for modules, those have not yet
received much review of testing so I'm not yet comfortable in merging
any of those changes yet.

Signed-off-by: Luis Chamberlain <mcgrof@...nel.org>

  Luis

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ