lkml.org 
[lkml]   [2012]   [Oct]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH 1/4] module: add syscall to load module from fd
Date
H. Peter Anvin <hpa <at> zytor.com> writes:
> > It is a bit more indirect, but also in practice it's a bit trickier than
> > that. We need to ensure the memory doesn't change underneath us and
> > stays attached to that fd. I can easily see that code slipping and
> > ending in an exploit.
> >
> > But that may be my irrational fear of the mm :)
>
> You have to do the same thing with a file/file descriptor, I would think.
>
> However, I keep wondering about the use case for this, as opposed to
> signatures.

Two things:
1. finit_module() lets LSMs make decisions based on full information on the
module to be loaded
2. On some systems (such as Chromium OS) we have a trusted root OS (e.g. the
entire root filesystem is protected using dm-verity); requiring signatures
on top of this is a waste of resources




\
 
 \ /
  Last update: 2012-10-19 14:21    [W:0.092 / U:0.084 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site