Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Jeff Xu <jeffxu@xxxxxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>
Subject: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
From: Dave Hansen <dave.hansen@xxxxxxxxx>
Date: Tue, 16 May 2023 15:30:50 -0700
Cc: jeffxu@xxxxxxxxxxxx, luto@xxxxxxxxxx, jorgelo@xxxxxxxxxxxx, groeck@xxxxxxxxxxxx, jannh@xxxxxxxxxx, sroettger@xxxxxxxxxx, akpm@xxxxxxxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-mm@xxxxxxxxx, linux-hardening@xxxxxxxxxxxxxxx
In-reply-to: <CALmYWFteCd+h+tn+LmgTpN9Ld5=qAMMQ34=b1KCoE3OSBun+DQ@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0

On 5/16/23 15:17, Jeff Xu wrote:
>>> This set of patch covers mprotect/munmap, I plan to work on other
>>> syscalls after this.
>> Which ones are on your list currently?
>>
> mprotect/mprotect_pkey/munmap
> mmap/mremap
> madvice,brk,sbrk

What about pkey_free()?

Without that, someone can presumably free the pkey and then reallocate
it without PKEY_ENFORCE_API.

Follow-Ups:
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Jeff Xu

References:
- [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: jeffxu
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Kees Cook
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Jeff Xu

Prev by Date: Re: [PATCH 5/6] KEY: Apply PKEY_ENFORCE_API to munmap
Next by Date: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
Previous by thread: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
Next by thread: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
Index(es):
- Date
- Thread

[Index of Archives] [Linux Wireless] [Linux Kernel] [ATH6KL] [Linux Bluetooth] [Linux Netdev] [Kernel Newbies] [Share Photos] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Samba] [Device Mapper]