Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Jeff Xu <jeffxu@xxxxxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>
Subject: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
From: Dave Hansen <dave.hansen@xxxxxxxxx>
Date: Tue, 16 May 2023 15:30:50 -0700
Cc: jeffxu@xxxxxxxxxxxx, luto@xxxxxxxxxx, jorgelo@xxxxxxxxxxxx, groeck@xxxxxxxxxxxx, jannh@xxxxxxxxxx, sroettger@xxxxxxxxxx, akpm@xxxxxxxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-mm@xxxxxxxxx, linux-hardening@xxxxxxxxxxxxxxx
In-reply-to: <CALmYWFteCd+h+tn+LmgTpN9Ld5=qAMMQ34=b1KCoE3OSBun+DQ@mail.gmail.com>
References: <20230515130553.2311248-1-jeffxu@chromium.org> <202305161307.4A16BB6A47@keescook> <CALmYWFteCd+h+tn+LmgTpN9Ld5=qAMMQ34=b1KCoE3OSBun+DQ@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0

On 5/16/23 15:17, Jeff Xu wrote:
>>> This set of patch covers mprotect/munmap, I plan to work on other
>>> syscalls after this.
>> Which ones are on your list currently?
>>
> mprotect/mprotect_pkey/munmap
> mmap/mremap
> madvice,brk,sbrk

What about pkey_free()?

Without that, someone can presumably free the pkey and then reallocate
it without PKEY_ENFORCE_API.

Follow-Ups:
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Jeff Xu

References:
- [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: jeffxu
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Kees Cook
- Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
  - From: Jeff Xu

Prev by Date: Re: [PATCH 5/6] KEY: Apply PKEY_ENFORCE_API to munmap
Next by Date: Re: [PATCH v2] mm: userfaultfd: avoid passing an invalid range to vma_merge()
Previous by thread: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
Next by thread: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Bugtraq] [Linux OMAP] [Linux MIPS] [eCos] [Asterisk Internet PBX] [Linux API]