Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Andy Lutomirski <luto@xxxxxxxxxx>
Subject: Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Thu, 13 Oct 2022 20:54:14 -0700
Cc: Jann Horn <jannh@xxxxxxxxxx>, Christian Brauner <brauner@xxxxxxxxxx>, "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>, Jorge Merlino <jorge.merlino@xxxxxxxxxxxxx>, Al Viro <viro@xxxxxxxxxxxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, linux-mm@xxxxxxxxx, linux-fsdevel@xxxxxxxxxxxxxxx, John Johansen <john.johansen@xxxxxxxxxxxxx>, Paul Moore <paul@xxxxxxxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, "Serge E. Hallyn" <serge@xxxxxxxxxx>, Stephen Smalley <stephen.smalley.work@xxxxxxxxx>, Eric Paris <eparis@xxxxxxxxxxxxxx>, Richard Haines <richard_c_haines@xxxxxxxxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, Xin Long <lucien.xin@xxxxxxxxx>, "David S. Miller" <davem@xxxxxxxxxxxxx>, Todd Kjos <tkjos@xxxxxxxxxx>, Ondrej Mosnacek <omosnace@xxxxxxxxxx>, Prashanth Prahlad <pprahlad@xxxxxxxxxx>, Micah Morton <mortonm@xxxxxxxxxxxx>, Fenghua Yu <fenghua.yu@xxxxxxxxx>, Andrei Vagin <avagin@xxxxxxxxx>, Linux Kernel Mailing List <linux-kernel@xxxxxxxxxxxxxxx>, apparmor@xxxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, selinux@xxxxxxxxxxxxxxx, linux-hardening@xxxxxxxxxxxxxxx
In-reply-to: <2032f766-1704-486b-8f24-a670c0b3cb32@app.fastmail.com>

On Thu, Oct 13, 2022 at 08:18:04PM -0700, Andy Lutomirski wrote:
> But seriously, this makes no sense at all.  It should not be possible to exec a program and then, without ptrace, change its cwd out from under it.  Do we really need to preserve this behavior?

Yup, already abandoned:
https://lore.kernel.org/lkml/202210061301.207A20C8E5@keescook/

-- 
Kees Cook

References:
- [PATCH 0/2] fs/exec: Explicitly unshare fs_struct on exec
  - From: Kees Cook
- [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  - From: Kees Cook
- Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  - From: Christian Brauner
- Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  - From: Jann Horn
- Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  - From: Andy Lutomirski

Prev by Date: Re: [PATCH v2 1/2] filemap: find_lock_entries() now updates start offset
Next by Date: [RFC PATCH] mm: move xa forward when run across zombie page
Previous by thread: Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Next by thread: Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Index(es):
- Date
- Thread

[Index of Archives] [Linux Ext4 Filesystem] [Union Filesystem] [Filesystem Testing] [Ceph Users] [Ecryptfs] [NTFS 3] [AutoFS] [Kernel Newbies] [Share Photos] [Security] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux Cachefs] [Reiser Filesystem] [Linux RAID] [NTFS 3] [Samba] [Device Mapper] [CEPH Development]