linux-kernel - Re: [PATCH v1 0/8] x86_64 SandBox Mode arch hooks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20240214203529.68eccc68@meshulam.tesarici.cz>
Date: Wed, 14 Feb 2024 20:35:29 +0100
From: Petr Tesařík <petr@...arici.cz>
To: "Edgecombe, Rick P" <rick.p.edgecombe@...el.com>
Cc: "Xu, Pengfei" <pengfei.xu@...el.com>, "tglx@...utronix.de"
 <tglx@...utronix.de>, "luto@...nel.org" <luto@...nel.org>,
 "kirill.shutemov@...ux.intel.com" <kirill.shutemov@...ux.intel.com>,
 "brgerst@...il.com" <brgerst@...il.com>, "jgg@...pe.ca" <jgg@...pe.ca>,
 "corbet@....net" <corbet@....net>, "Li, Xin3" <xin3.li@...el.com>,
 "roberto.sassu@...weicloud.com" <roberto.sassu@...weicloud.com>,
 "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
 "petr.tesarik1@...wei-partners.com" <petr.tesarik1@...wei-partners.com>,
 "dwmw@...zon.co.uk" <dwmw@...zon.co.uk>, "x86@...nel.org" <x86@...nel.org>,
 "bp@...en8.de" <bp@...en8.de>, "peterz@...radead.org"
 <peterz@...radead.org>, "rppt@...nel.org" <rppt@...nel.org>,
 "arnd@...db.de" <arnd@...db.de>, "mhiramat@...nel.org"
 <mhiramat@...nel.org>, "oleg@...hat.com" <oleg@...hat.com>,
 "keescook@...omium.org" <keescook@...omium.org>, "Huang, Kai"
 <kai.huang@...el.com>, "jacob.jun.pan@...ux.intel.com"
 <jacob.jun.pan@...ux.intel.com>, "zegao2021@...il.com"
 <zegao2021@...il.com>, "hpa@...or.com" <hpa@...or.com>, "mingo@...hat.com"
 <mingo@...hat.com>, "jpoimboe@...nel.org" <jpoimboe@...nel.org>, "Rodel,
 Jorg" <jroedel@...e.de>, "Zhang, Tina" <tina.zhang@...el.com>, "Hansen,
 Dave" <dave.hansen@...el.com>, "linux-doc@...r.kernel.org"
 <linux-doc@...r.kernel.org>, "akpm@...ux-foundation.org"
 <akpm@...ux-foundation.org>, "dave.hansen@...ux.intel.com"
 <dave.hansen@...ux.intel.com>, "petrtesarik@...weicloud.com"
 <petrtesarik@...weicloud.com>
Subject: Re: [PATCH v1 0/8] x86_64 SandBox Mode arch hooks

On Wed, 14 Feb 2024 19:19:27 +0000
"Edgecombe, Rick P" <rick.p.edgecombe@...el.com> wrote:

> On Wed, 2024-02-14 at 19:32 +0100, Petr Tesařík wrote:
> > > What use case needs to have the sandbox both protected from the
> > > kernel
> > > (trusted operations) and non-privileged (the kernel protected from
> > > it
> > > via CPL3)? It seems like opposite things.  
> > 
> > I think I have mentioned one: parsing keys for the trusted keyring.
> > The
> > parser is complex enough to be potentially buggy, but the security
> > folks have already dismissed the idea to run it as a user mode
> > helper.  
> 
> Ah, I didn't realize the kernel needed to be protected from the key
> parsing part because you called it out as a trusted operation. So on
> the protect-the-kernel-side it's similar to the microkernel security
> reasoning.
> 
> Did I get the other part wrong - that you want to protect the sandbox
> from the rest of kernel as well?

Protecting the sandbox from the rest of the kernel is out of scope.
However, different sandboxes should be protected from each other.

Petr T