Re: [RFC 0/1] whitelisting UDP GSO and GRO cmsgs

2020-11-30 Thread Victor Stewart
this being the list of UDP options.. i think we're good here? I'll put together a new patch. https://github.com/torvalds/linux/blob/b65054597872ce3aefbc6a666385eabdf9e288da/include/uapi/linux/udp.h#L30 /* UDP socket options */ #define UDP_CORK 1 /* Never send partially complete segments */ #defin

Re: [RFC 0/1] whitelisting UDP GSO and GRO cmsgs

2020-11-30 Thread Stefan Metzmacher
Hi Soheil, > Thank you for CCing us. > > The reason for PROTO_CMSG_DATA_ONLY is explained in the paragraph > above in the commit message. PROTO_CMSG_DATA_ONLY is basically to > allow-list a protocol that is guaranteed not to have the privilege > escalation in https://crbug.com/project-zero/1975.

Re: [RFC 0/1] whitelisting UDP GSO and GRO cmsgs

2020-11-30 Thread Stefan Metzmacher
Am 28.11.20 um 20:03 schrieb Victor Stewart: > On Thu, Nov 26, 2020 at 7:36 AM Stefan Metzmacher wrote: >> >> Am 23.11.20 um 17:29 schrieb Victor Stewart: >>> On Mon, Nov 23, 2020 at 4:13 PM Stefan Metzmacher wrote: Hi Victor, wouldn't it be enough to port the PROTO_CMSG_DATA_