вт, 13 нояб. 2018 г. в 14:57, Jann Horn <jannh@xxxxxxxxxx>: > > On Tue, Nov 13, 2018 at 12:40 PM Timofey Titovets > <timofey.titovets@xxxxxxxxxx> wrote: > > ksm by default working only on memory that added by > > madvise(). > > > > And only way get that work on other applications: > > * Use LD_PRELOAD and libraries > > * Patch kernel > > > > Lets use kernel task list and add logic to import VMAs from tasks. > > > > That behaviour controlled by new attributes: > > * mode: > > I try mimic hugepages attribute, so mode have two states: > > * madvise - old default behaviour > > * always [new] - allow ksm to get tasks vma and > > try working on that. > > Please don't. And if you really have to for some reason, put some big > warnings on this, advising people that it's a security risk. > > KSM is one of the favorite punching bags of side-channel and hardware > security researchers: > > As a gigantic, problematic side channel: > http://staff.aist.go.jp/k.suzaki/EuroSec2011-suzaki.pdf > https://www.usenix.org/system/files/conference/woot15/woot15-paper-barresi.pdf > https://access.redhat.com/blogs/766093/posts/1976303 > https://gruss.cc/files/dedup.pdf > > In particular https://gruss.cc/files/dedup.pdf ("Practical Memory > Deduplication Attacks in Sandboxed JavaScript") shows that KSM makes > it possible to use malicious JavaScript to determine whether a given > page of memory exists elsewhere on your system. > > And also as a way to target rowhammer-based faults: > https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_razavi.pdf > https://thisissecurity.stormshield.com/2017/10/19/attacking-co-hosted-vm-hacker-hammer-two-memory-modules/ I'm very sorry, i'm not a security specialist. But if i understood correctly, ksm have that security issues _without_ my patch set. Even more, not only KSM have that type of issue, any memory deduplication have that problems. Any guy who care about security must decide on it self. Which things him use and how he will defend from others. Even more on it self he must learn tools, what he use and make some decision right? So, if you really care about that problem in general, or only on KSM side, that your initiative and your duty to warn people about that. KSM already exists for 10+ years. You know about security implication of use memory deduplication. That your duty to send a patches to documentation, and add appropriate warnings. Sorry for my passive aggressive, i don't try hurt someone, or humiliate. That's just my IMHO and i'm just to restricted in my english knowledge, to write that more gentle. Thanks!
