[lkml]   [2013]   [Dec]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Subject[Resend] [PATCH 0/2] procfs: make /proc/*/{stack,syscall,pagemap} 0400
The following patches make /proc/*/{stack,syscall,personality,pagemap}

These files contain sensitive information that can be used by an
unprivileged process to leak address space and bypass ASLR.

This is a resend, the original discussion:

Ended by confirming this, and Kees Cook Acked the first patch.

Kees Cook also confirmed the security exposure here:

So these patches only restore the original 0400 mode that will make
the VFS able to block unprivileged processes from getting file
descriptors on arbitrary privileged
/proc/*/{stack,syscall,personality,pagemap} files.

From the first discussion no one picked the patches, so I included them
in the "procfs: protect /proc/*/* entries with file->f_cred" series:

However, that attempt failed to have a general aggreemnt, so I'm
resending again but _only_ those two patches.

At least we have a VFS protection for now.

Djalal Harouni (2):
procfs: make /proc/*/{stack,syscall,personality} 0400
procfs: make /proc/*/pagemap 0400

fs/proc/base.c | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)

 \ /
  Last update: 2013-12-15 21:01    [W:0.063 / U:0.048 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site