From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tejun Heo Subject: Re: [PATCH] cgroups: censor kernel pointer in debug files Date: Mon, 6 Mar 2017 15:16:35 -0500 Message-ID: <20170306201635.GJ19696@htj.duckdns.org> References: <20170225095648.GA4917@beast> Mime-Version: 1.0 Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=MPyy6KlBWkntRLq17IhCOMMB1BFSYuR/88yZzEKgPIk=; b=Jlf2MYu1CCtC0GYI2vmGLD7rjMIHRKUd2DT3Xew6KUWphHNzD5ShMI94J4NDMsGy7f D3oWDSXTJNAK506NhR0Xle2+uFyvru1QFbJAdS+Yw5zTjuAXWM331todhTaHRzZrob4U WQ1veqyskrGcI3saf00gLLHelPMYZI7ls8P6OYtyTufHEujBg62b1T6v/BdLbBlsY6Ab SYPeuUZAqIj91LIxIGnBUgWoNySm0siAQI0eigXmwj5WUzYVPTQtXkbM68jXgDb16tM1 0Te3g3jjPTYzrOBlz0YYgLGgCtlxnu4agoWQnTuXrP1BEf/rF5yM9YpWxYUI3fdU9lGt rreg== Content-Disposition: inline In-Reply-To: <20170225095648.GA4917@beast> Sender: cgroups-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Kees Cook Cc: Li Zefan , Johannes Weiner , cgroups-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, kernel-hardening-ZwoEplunGu1jrUoiu81ncdBPR1lH4CV8@public.gmane.org On Sat, Feb 25, 2017 at 01:56:48AM -0800, Kees Cook wrote: > As found in grsecurity, this avoids exposing a kernel pointer through > the cgroup debug entries. > > Signed-off-by: Kees Cook Applied to cgroup/for-4.11-fixes. Thanks. -- tejun From mboxrd@z Thu Jan 1 00:00:00 1970 Sender: Tejun Heo Date: Mon, 6 Mar 2017 15:16:35 -0500 From: Tejun Heo Message-ID: <20170306201635.GJ19696@htj.duckdns.org> References: <20170225095648.GA4917@beast> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20170225095648.GA4917@beast> Subject: [kernel-hardening] Re: [PATCH] cgroups: censor kernel pointer in debug files To: Kees Cook Cc: Li Zefan , Johannes Weiner , cgroups@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-hardening@lists.openwall.com List-ID: On Sat, Feb 25, 2017 at 01:56:48AM -0800, Kees Cook wrote: > As found in grsecurity, this avoids exposing a kernel pointer through > the cgroup debug entries. > > Signed-off-by: Kees Cook Applied to cgroup/for-4.11-fixes. Thanks. -- tejun From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754144AbdCFUQr (ORCPT ); Mon, 6 Mar 2017 15:16:47 -0500 Received: from mail-yw0-f196.google.com ([209.85.161.196]:34073 "EHLO mail-yw0-f196.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753140AbdCFUQi (ORCPT ); Mon, 6 Mar 2017 15:16:38 -0500 Date: Mon, 6 Mar 2017 15:16:35 -0500 From: Tejun Heo To: Kees Cook Cc: Li Zefan , Johannes Weiner , cgroups@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-hardening@lists.openwall.com Subject: Re: [PATCH] cgroups: censor kernel pointer in debug files Message-ID: <20170306201635.GJ19696@htj.duckdns.org> References: <20170225095648.GA4917@beast> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20170225095648.GA4917@beast> User-Agent: Mutt/1.7.1 (2016-10-04) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Feb 25, 2017 at 01:56:48AM -0800, Kees Cook wrote: > As found in grsecurity, this avoids exposing a kernel pointer through > the cgroup debug entries. > > Signed-off-by: Kees Cook Applied to cgroup/for-4.11-fixes. Thanks. -- tejun