Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-22 Thread Jeff Xu
On Tue, Feb 18, 2025 at 3:18 PM Pedro Falcato wrote: > The problem with something like prctl is that we either indirectly > provide some kind of limited form of munseal, or we require some sort > of handover (like personality(2) + execve(2)), which both sound like a > huge PITA and still don't sol

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-19 Thread enh
On Tue, Feb 18, 2025 at 6:18 PM Pedro Falcato wrote: > > On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote: > > > > On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote: > > > On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes > > > wrote: > > > > > > > > (sorry I really am struggling to rep

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-19 Thread Adhemerval Zanella Netto
On 18/02/25 20:18, Pedro Falcato wrote: > On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote: >> >> On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote: >>> On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes >>> wrote: (sorry I really am struggling to reply to mail as lore still

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-18 Thread Pedro Falcato
On Thu, Feb 13, 2025 at 8:47 PM Kees Cook wrote: > > On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote: > > On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes > > wrote: > > > > > > (sorry I really am struggling to reply to mail as lore still seems to be > > > broken). > > > > > > On Wed

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Kees Cook
On Thu, Feb 13, 2025 at 07:59:48PM +, Pedro Falcato wrote: > On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes > wrote: > > > > (sorry I really am struggling to reply to mail as lore still seems to be > > broken). > > > > On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote: > > > On We

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Liam R. Howlett
* Kees Cook [250213 14:34]: > > > On February 13, 2025 10:35:21 AM PST, "Liam R. Howlett" > wrote: > >* Kees Cook [250212 17:05]: > >> On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote: > >> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > >> > > From: Je

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Pedro Falcato
On Wed, Feb 12, 2025 at 2:02 PM Lorenzo Stoakes wrote: > > (sorry I really am struggling to reply to mail as lore still seems to be > broken). > > On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote: > > On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes > > wrote: > > > > > > On Wed, Feb

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Kees Cook
On February 13, 2025 10:35:21 AM PST, "Liam R. Howlett" wrote: >* Kees Cook [250212 17:05]: >> On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote: >> > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: >> > > From: Jeff Xu >> > > >> > > The commit message in t

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Liam R. Howlett
* Kees Cook [250212 17:05]: > On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote: > > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > > > From: Jeff Xu > > > > > > The commit message in the first patch contains the full description of > > > this series. > > >

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Jeff Xu
On Wed, Feb 12, 2025 at 3:24 AM Lorenzo Stoakes wrote: > It'd be nice to update the documentation to have a list of 'known > problematic userland software with sealed VDSO' so we make people aware. > Sure. It will be added in the next version. > > And I _want the series to land_ :>) I suspect we

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-13 Thread Jeff Xu
On Wed, Feb 12, 2025 at 2:05 PM Kees Cook wrote: > > > It'd be nice to update the documentation to have a list of 'known > > problematic userland software with sealed VDSO' so we make people aware. > > I like this idea! Probably in mseal.rst, as the Kconfig help already > points there. > Will upda

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-12 Thread Kees Cook
On Wed, Feb 12, 2025 at 11:24:35AM +, Lorenzo Stoakes wrote: > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > > From: Jeff Xu > > > > The commit message in the first patch contains the full description of > > this series. > > Sorry to nit, but it'd be useful to reprodu

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-12 Thread Johannes Berg
On Wed, 2025-02-12 at 14:01 +, Lorenzo Stoakes wrote: > Thanks, yeah that's a good point, it would have to be implemented as a > personality or something similar otherwise you're essentially relying on > 'unsealing' which can't be permitted. > > I'm not sure how useful that'd be for the likes

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-12 Thread Lorenzo Stoakes
(sorry I really am struggling to reply to mail as lore still seems to be broken). On Wed, Feb 12, 2025 at 12:37:50PM +, Pedro Falcato wrote: > On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes > wrote: > > > > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > > > From: Jef

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-12 Thread Pedro Falcato
On Wed, Feb 12, 2025 at 11:25 AM Lorenzo Stoakes wrote: > > On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > > From: Jeff Xu > > > > The commit message in the first patch contains the full description of > > this series. > > Sorry to nit, but it'd be useful to reproduce in t

Re: [RFC PATCH v5 0/7] mseal system mappings

2025-02-12 Thread Lorenzo Stoakes
On Wed, Feb 12, 2025 at 03:21:48AM +, jef...@chromium.org wrote: > From: Jeff Xu > > The commit message in the first patch contains the full description of > this series. Sorry to nit, but it'd be useful to reproduce in the cover letter too! But this obviously isn't urgent, just be nice when

[RFC PATCH v5 0/7] mseal system mappings

2025-02-11 Thread jeffxu
From: Jeff Xu The commit message in the first patch contains the full description of this series. -- History: V5 - Remove kernel cmd line (Lorenzo Stoakes) - Add test info (Lorenzo Stoakes) - Add threat model info (Lorenzo Stoakes) - Fix x86 selftest: test_mremap_vdso

[RFC PATCH v5 0/7] mseal system mappings

2025-02-11 Thread jeffxu
From: Jeff Xu The commit message in the first patch contains the full description of this series. -- History: V5 - Remove kernel cmd line (Lorenzo Stoakes) - Add test info (Lorenzo Stoakes) - Add threat model info (Lorenzo Stoakes) - Fix x86 selftest: test_mremap_vdso