lkml.org 
[lkml]   [2023]   [Feb]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: [PATCH v5 4/8] LSM: lsm_get_self_attr syscall for LSM self attributes
From

On 12/01/2023 22:39, Paul Moore wrote:
> On Thu, Jan 12, 2023 at 9:40 AM Arnd Bergmann <arnd@arndb.de> wrote:
>> On Mon, Jan 9, 2023, at 19:07, Casey Schaufler wrote:
>>> +/**
>>> + * struct lsm_ctx - LSM context
>>> + * @id: the LSM id number, see LSM_ID_XXX
>>> + * @flags: context specifier and LSM specific flags
>>> + * @ctx_len: the size of @ctx
>>> + * @ctx: the LSM context, a nul terminated string
>>> + *
>>> + * @ctx in a nul terminated string.
>>> + * (strlen(@ctx) < @ctx_len) is always true.
>>> + * (strlen(@ctx) == @ctx_len + 1) is not guaranteed.
>>> + */
>>> +struct lsm_ctx {
>>> + __u32 id;
There is a hole here for 64-bit architectures.

>>> + __u64 flags;
>>> + __kernel_size_t ctx_len;

This is an architecture-related size, which makes the struct size
different according to architectures. We should avoid that.

>>> + __u8 ctx[];
>>> +};

I suggest packing this struct.

>>
>> I think this should be changed to be the same layout on
>> all architectures regardless of __u64 alignment and
>> sizeof(__kernel_size_t) differences, to avoid the need
>> for compat syscalls and explicit clearing of the
>> internal padding.
>>
>> Maybe just use __u64 fields for all three integers?
>
> I have no problem with that ... the ctx[] field is variable length
> anyway so keeping it as a __u8 should be fine.
>

For Landlock, we make sure the UAPI structs don't contain holes, are
packed, and have the same size for all architectures. We can check that
with pahole but for strong guarantee I suggest the same build check as
for Landlock's build_check_abi():
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/security/landlock/syscalls.c#n68
We don't need to use 64-bit fields everywhere.

\
 
 \ /
  Last update: 2023-03-27 00:23    [W:0.068 / U:0.792 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site