On Tue, Jan 05, 2021 at 12:38:31PM -0800, Linus Torvalds wrote: > This whole thing isn't important enough to get the dentry lock. It's > more of a hint than anything else. > > Why isn't the fix to just use READ_ONCE() of the name pointer, and do > it under RCU? Umm... Take a look at audit_log_untrustedstring() - it really assumes that string is not changing under it. It could be massaged to be resilent to such changes, and it's not even all that hard (copy the sucker byte-by-byte, checking them for prohibited characters, with fallback to hex dump if it finds one), but I really don't want to mess with that for -stable and TBH I don't see the point - if the system is spending enough time in spewing into audit for contention and/or cacheline pingpong to matter, you are FUBAR anyway. In this case dumber is better; sure, if it was just a string copy with the accuracy in face of concurrent renames not guaranteed, I'd be all for "let's see if we can just use %pd printf, or go for open-coded analogue of such". But here the lack of whitespaces and quotes in the output is expected by userland tools and that's more sensitive than the accuracy... Again, if there's anybody seriously interested in analogue of %pd with that (or some other) form of quoting, it could be done. But I don't think it's a good idea for -stable and it obviously can be done on top of the minimal race fix.
