Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-26 Thread Kees Cook
On Wed, Sep 26, 2018 at 6:19 PM, Jann Horn wrote: > On Thu, Sep 13, 2018 at 4:39 PM Kees Cook wrote: >> On Thu, Sep 13, 2018 at 4:55 AM, Jann Horn wrote: >> > On Thu, Sep 13, 2018 at 12:28 AM Kees Cook wrote: >> >> >> >> On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: >> >> > +linux-api, I g

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-26 Thread Jann Horn
On Thu, Sep 13, 2018 at 4:39 PM Kees Cook wrote: > On Thu, Sep 13, 2018 at 4:55 AM, Jann Horn wrote: > > On Thu, Sep 13, 2018 at 12:28 AM Kees Cook wrote: > >> > >> On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: > >> > +linux-api, I guess > >> > > >> > On Tue, Sep 11, 2018 at 8:39 PM Jann Ho

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-13 Thread Kees Cook
On Thu, Sep 13, 2018 at 4:55 AM, Jann Horn wrote: > On Thu, Sep 13, 2018 at 12:28 AM Kees Cook wrote: >> >> On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: >> > +linux-api, I guess >> > >> > On Tue, Sep 11, 2018 at 8:39 PM Jann Horn wrote: >> >> >> >> Restrict the ability to inspect kernel st

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-13 Thread Jann Horn
On Thu, Sep 13, 2018 at 12:28 AM Kees Cook wrote: > > On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: > > +linux-api, I guess > > > > On Tue, Sep 11, 2018 at 8:39 PM Jann Horn wrote: > >> > >> Restrict the ability to inspect kernel stacks of arbitrary tasks to root > >> in order to prevent a l

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-12 Thread Laura Abbott
On 09/12/2018 03:27 PM, Kees Cook wrote: On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: +linux-api, I guess On Tue, Sep 11, 2018 at 8:39 PM Jann Horn wrote: Restrict the ability to inspect kernel stacks of arbitrary tasks to root in order to prevent a local attacker from exploiting racy

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-12 Thread Kees Cook
On Wed, Sep 12, 2018 at 8:29 AM, Jann Horn wrote: > +linux-api, I guess > > On Tue, Sep 11, 2018 at 8:39 PM Jann Horn wrote: >> >> Restrict the ability to inspect kernel stacks of arbitrary tasks to root >> in order to prevent a local attacker from exploiting racy stack unwinding >> to leak kerne

Re: [PATCH] proc: restrict kernel stack dumps to root

2018-09-12 Thread Jann Horn
+linux-api, I guess On Tue, Sep 11, 2018 at 8:39 PM Jann Horn wrote: > > Restrict the ability to inspect kernel stacks of arbitrary tasks to root > in order to prevent a local attacker from exploiting racy stack unwinding > to leak kernel task stack contents. > See the added comment for a longer

[PATCH] proc: restrict kernel stack dumps to root

2018-09-11 Thread Jann Horn
Restrict the ability to inspect kernel stacks of arbitrary tasks to root in order to prevent a local attacker from exploiting racy stack unwinding to leak kernel task stack contents. See the added comment for a longer rationale. There don't seem to be any users of this userspace API that can't gra