linux-kernel - Re: [PATCH 3/3] prctl,syscall_user_dispatch: add a getter for configuration info

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Y8CO6E0oOcEuveaD@memverge.com>
Date:   Thu, 12 Jan 2023 17:51:20 -0500
From:   Gregory Price <gregory.price@...verge.com>
To:     Andrei Vagin <avagin@...il.com>
Cc:     Gregory Price <gourry.memverge@...il.com>,
        linux-kernel@...r.kernel.org, linux-fsdevel@...r.kernel.org,
        linux-doc@...r.kernel.org, linux-kselftest@...r.kernel.org,
        krisman@...labora.com, tglx@...utronix.de, luto@...nel.org,
        oleg@...hat.com, peterz@...radead.org, ebiederm@...ssion.com,
        akpm@...ux-foundation.org, adobriyan@...il.com, corbet@....net,
        shuah@...nel.org
Subject: Re: [PATCH 3/3] prctl,syscall_user_dispatch: add a getter for
 configuration info

On Thu, Jan 12, 2023 at 10:15:39AM -0800, Andrei Vagin wrote:
> On Mon, Jan 09, 2023 at 10:33:48AM -0500, Gregory Price wrote:
> > This patch implements simple getter interface for syscall user dispatch
> > configuration info.
> > 
> > To support checkpoint/resume of a syscall user dispatch process,
> > the prctl settings for syscall user dispatch must be fetchable.
> > Presently, these settings are write-only, making it impossible to
> > implement transparent checkpoint (coordination with the software is
> > required).
> > 
> > As Syscall User Dispatch is explicitly not for secure-container
> > development, exposing the configuration state via prctl does not
> > violate the original design intent.
> > 
> > Signed-off-by: Gregory Price <gregory.price@...verge.com>
> > ---
> >  .../admin-guide/syscall-user-dispatch.rst     | 18 +++++++
> >  include/linux/syscall_user_dispatch.h         |  7 +++
> >  include/uapi/linux/prctl.h                    |  3 ++
> >  kernel/entry/syscall_user_dispatch.c          | 14 +++++
> >  kernel/sys.c                                  |  4 ++
> >  .../syscall_user_dispatch/sud_test.c          | 54 +++++++++++++++++++
> >  6 files changed, 100 insertions(+)
> > 
> > diff --git a/Documentation/admin-guide/syscall-user-dispatch.rst b/Documentation/admin-guide/syscall-user-dispatch.rst
> > index 60314953c728..8b2c8b6441b7 100644
> > --- a/Documentation/admin-guide/syscall-user-dispatch.rst
> > +++ b/Documentation/admin-guide/syscall-user-dispatch.rst
> > @@ -45,6 +45,10 @@ only the syscall dispatcher address and the userspace key.
> >  As the ABI of these intercepted syscalls is unknown to Linux, these
> >  syscalls are not instrumentable via ptrace or the syscall tracepoints.
> >  
> > +A getter interface is supplied for the purpose of userland
> > +checkpoint/restore software being able to suspend and restore the
> > +current state of the system.
> > +
> >  Interface
> >  ---------
> >  
> > @@ -73,6 +77,20 @@ thread-wide, without the need to invoke the kernel directly.  selector
> >  can be set to SYSCALL_DISPATCH_FILTER_ALLOW or SYSCALL_DISPATCH_FILTER_BLOCK.
> >  Any other value should terminate the program with a SIGSYS.
> >  
> > +
> > +A thread can fetch the current Syscall User Dispatch configuration with the following prctl:
> > +
> > +  prctl(PR_GET_SYSCALL_USER_DISPATCH, <dispatch_config>))
> > +
> > +<dispatch_config> is a pointer to a ``struct syscall_user_dispatch`` as defined in ``linux/include/linux/syscall_user_dispatch.h``::
> 
> syscall_user_dispatch.h isn't a part of uapi, so I am not sure that it
> is a good idea to use it here.
> 
> For criu, it is much more convinient to have a ptrace interface to get
> this sort of parameters. prctl requires to execute a system call from a
> context of the target process. It is tricky so we want to minimize a
> number of such calls.
> 
> Thanks,
> Andrei


Thank you for the feedback.

I think you're right.  A Ptrace for this seems more in-line with the
SECCOMP filter exporting that CRIU uses too.

I'll look at implementing that instead.