On Tue, Feb 18, 2025 at 3:18 PM Pedro Falcato wrote:
> The problem with something like prctl is that we either indirectly
> provide some kind of limited form of munseal, or we require some sort
> of handover (like personality(2) + execve(2)), which both sound like a
> huge PITA and still don't sol
On Tue, Feb 18, 2025 at 6:18 PM Pedro Falcato wrote:
>
> On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote:
> >
> > On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote:
> > > On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes
> > > wrote:
> > > >
> > > > (sorry I really am struggling to rep
On 18/02/25 20:18, Pedro Falcato wrote:
> On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote:
>>
>> On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote:
>>> On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes
>>> wrote:
(sorry I really am struggling to reply to mail as lore still
On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote:
>
> On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote:
> > On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes
> > wrote:
> > >
> > > (sorry I really am struggling to reply to mail as lore still seems to be
> > > broken).
> > >
> > > On Wed
On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote:
> On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes
> wrote:
> >
> > (sorry I really am struggling to reply to mail as lore still seems to be
> > broken).
> >
> > On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote:
> > > On We
* Kees Cook [250213 14:34]:
>
>
> On February 13, 2025 10:35:21 AM PST, "Liam R. Howlett"
> wrote:
> >* Kees Cook [250212 17:05]:
> >> On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote:
> >> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> >> > > From: Je
On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes
wrote:
>
> (sorry I really am struggling to reply to mail as lore still seems to be
> broken).
>
> On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote:
> > On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes
> > wrote:
> > >
> > > On Wed, Feb
On February 13, 2025 10:35:21 AM PST, "Liam R. Howlett"
wrote:
>* Kees Cook [250212 17:05]:
>> On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote:
>> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
>> > > From: Jeff Xu
>> > >
>> > > The commit message in t
* Kees Cook [250212 17:05]:
> On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote:
> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> > > From: Jeff Xu
> > >
> > > The commit message in the first patch contains the full description of
> > > this series.
> >
>
On Wed, Feb 12, 2025 at 3:24 AM Lorenzo Stoakes
wrote:
> It'd be nice to update the documentation to have a list of 'known
> problematic userland software with sealed VDSO' so we make people aware.
>
Sure. It will be added in the next version.
>
> And I _want the series to land_ :>) I suspect we
On Wed, Feb 12, 2025 at 2:05 PM Kees Cook wrote:
>
> > It'd be nice to update the documentation to have a list of 'known
> > problematic userland software with sealed VDSO' so we make people aware.
>
> I like this idea! Probably in mseal.rst, as the Kconfig help already
> points there.
>
Will upda
On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote:
> On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> > From: Jeff Xu
> >
> > The commit message in the first patch contains the full description of
> > this series.
>
> Sorry to nit, but it'd be useful to reprodu
On Wed, 2025-02-12 at 14:01 +, Lorenzo Stoakes wrote:
> Thanks, yeah that's a good point, it would have to be implemented as a
> personality or something similar otherwise you're essentially relying on
> 'unsealing' which can't be permitted.
>
> I'm not sure how useful that'd be for the likes
(sorry I really am struggling to reply to mail as lore still seems to be
broken).
On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote:
> On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes
> wrote:
> >
> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> > > From: Jef
On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes
wrote:
>
> On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> > From: Jeff Xu
> >
> > The commit message in the first patch contains the full description of
> > this series.
>
> Sorry to nit, but it'd be useful to reproduce in t
On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote:
> From: Jeff Xu
>
> The commit message in the first patch contains the full description of
> this series.
Sorry to nit, but it'd be useful to reproduce in the cover letter too! But
this obviously isn't urgent, just be nice when
From: Jeff Xu
The commit message in the first patch contains the full description of
this series.
--
History:
V5
- Remove kernel cmd line (Lorenzo Stoakes)
- Add test info (Lorenzo Stoakes)
- Add threat model info (Lorenzo Stoakes)
- Fix x86 selftest: test_mremap_vdso
From: Jeff Xu
The commit message in the first patch contains the full description of
this series.
--
History:
V5
- Remove kernel cmd line (Lorenzo Stoakes)
- Add test info (Lorenzo Stoakes)
- Add threat model info (Lorenzo Stoakes)
- Fix x86 selftest: test_mremap_vdso
18 matches
Mail list logo