Re: [RESEND RFC] kernel/ksysfs.c: restrict /sys/kernel/notes to root access

2024-02-19 Thread Jann Horn
On Sun, Feb 18, 2024 at 8:47 AM Greg KH wrote: > > On Sun, Feb 18, 2024 at 03:35:01PM +0800, Guixiong Wei wrote: > > From: Guixiong Wei > > > > Restrict non-privileged user access to /sys/kernel/notes to > > avoid security attack. > > > > The non-privileged users have read access to notes. The no

Re: [RESEND RFC] kernel/ksysfs.c: restrict /sys/kernel/notes to root access

2024-02-19 Thread Jürgen Groß
On 18.02.24 10:04, Kees Cook wrote: On Sun, Feb 18, 2024 at 08:47:03AM +0100, Greg KH wrote: On Sun, Feb 18, 2024 at 03:35:01PM +0800, Guixiong Wei wrote: From: Guixiong Wei Restrict non-privileged user access to /sys/kernel/notes to avoid security attack. The non-privileged users have read

Re: [RESEND RFC] kernel/ksysfs.c: restrict /sys/kernel/notes to root access

2024-02-19 Thread Guixiong Wei
On 2024/2/18 17:04, Kees Cook wrote: On Sun, Feb 18, 2024 at 08:47:03AM +0100, Greg KH wrote: On Sun, Feb 18, 2024 at 03:35:01PM +0800, Guixiong Wei wrote: From: Guixiong Wei Restrict non-privileged user access to /sys/kernel/notes to avoid security attack. The non-privileged users have re

Re: [RESEND RFC] kernel/ksysfs.c: restrict /sys/kernel/notes to root access

2024-02-18 Thread Kees Cook
On Sun, Feb 18, 2024 at 08:47:03AM +0100, Greg KH wrote: > On Sun, Feb 18, 2024 at 03:35:01PM +0800, Guixiong Wei wrote: > > From: Guixiong Wei > > > > Restrict non-privileged user access to /sys/kernel/notes to > > avoid security attack. > > > > The non-privileged users have read access to note

Re: [RESEND RFC] kernel/ksysfs.c: restrict /sys/kernel/notes to root access

2024-02-17 Thread Greg KH
On Sun, Feb 18, 2024 at 03:35:01PM +0800, Guixiong Wei wrote: > From: Guixiong Wei > > Restrict non-privileged user access to /sys/kernel/notes to > avoid security attack. > > The non-privileged users have read access to notes. The notes > expose the load address of startup_xen. This address cou