linux-kernel - Re: [PATCH] secretmem: use SB_I

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2ffa26df-5a30-412d-ab38-042b6beb1187@I-love.SAKURA.ne.jp>
Date: Fri, 12 Sep 2025 22:49:35 +0900
From: Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp>
To: Christian Brauner <brauner@...nel.org>, Al Viro <viro@...iv.linux.org.uk>
Cc: Jens Axboe <axboe@...nel.dk>,
        syzbot <syzbot+3de83a9efcca3f0412ee@...kaller.appspotmail.com>,
        jack@...e.cz, kees@...nel.org, linux-kernel@...r.kernel.org,
        Mike Rapoport <rppt@...nel.org>
Subject: Re: [PATCH] secretmem: use SB_I_NOEXEC

F.Y.I. This bug is still happening; more patches needed.

#syz fix: secretmem: use SB_I_NOEXEC

On 2025/07/08 16:38, Christian Brauner wrote:
> On Mon, Jul 07, 2025 at 06:17:35PM +0100, Al Viro wrote:
>> On Mon, Jul 07, 2025 at 02:10:36PM +0200, Christian Brauner wrote:
>>
>>>  static int secretmem_init_fs_context(struct fs_context *fc)
>>>  {
>>> -	return init_pseudo(fc, SECRETMEM_MAGIC) ? 0 : -ENOMEM;
>>> +	struct pseudo_fs_context *ctx;
>>> +
>>> +	ctx = init_pseudo(fc, SECRETMEM_MAGIC);
>>> +	if (!ctx)
>>> +		return -ENOMEM;
>>> +
>>> +	fc->s_iflags |= SB_I_NOEXEC;
>>> +	fc->s_iflags |= SB_I_NODEV;
>>> +	return 0;
>>>  }