[lkml]   [2019]   [Jan]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] mm/mincore: allow for making sys_mincore() privileged
    On Sat, 5 Jan 2019, Jann Horn wrote:

    > > Provide vm.mincore_privileged sysctl, which makes it possible to mincore()
    > > start returning -EPERM in case it's invoked by a process lacking
    > > CAP_SYS_ADMIN.
    > >
    > > The default behavior stays "mincore() can be used by anybody" in order to
    > > be conservative with respect to userspace behavior.
    > >
    > > [1]
    > Just checking: I guess /proc/$pid/pagemap (iow, the pagemap_read()
    > handler) is less problematic because it only returns data about the
    > state of page tables, and doesn't query the address_space? In other
    > words, it permits monitoring evictions, but non-intrusively detecting
    > that something has been loaded into memory by another process is
    > harder?

    So I was just about to immediately reply that we don't expose pagemap
    anymore due to rowhammer, but apparently that's not true any more
    (this behavioud was originally introduced by ab676b7d6fbf, but then
    changed via 1c90308e7a77 (and further adjusted for swap entries in
    ab6ecf247a, but I guess that's not all that interesting).


    But unless it has been mapped with MAP_POPULATE (whcih is outside the
    attacker's control), there is no guarantee that the mappings would
    actually be there, right?

    Jiri Kosina
    SUSE Labs

     \ /
      Last update: 2019-01-06 00:11    [W:3.317 / U:0.056 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site