[uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Blaisorblade]

This time, I've announced this on my homepage, since I'd like to get some more 
testing.

Things I've forgot:
* make it apply easily on Fedora kernels.

This should simply mean moving the TIF_SYSCALL_EMU to place no.8, to leave a 
slot free for _DB7, needed for 4g4g or something like that and using testw 
instead of testb for testing against it.

Summary of changes against -V7 (also put in the "ChangeLog" page):

* for kernels >=2.6.10, in the splitout, various patches were folded together.

* rename-modify-ldt-to-avoid-conflicts.patch: fix the reported ATI module 
compile problem by renaming modify_ldt to __modify_ldt.

* ptrace_ldt-reload-smp-fix.patch: fix a SMP-host bug noticed by Bodo 
Stroesser.

* skas-add-locking-for-mm-switch.patch: from me, add correct locking to 
PTRACE_SWITCH_MM to avoid races. Someone please test with SMP hosts / with 
spinlock debugging enabled, to check for any possible deadlock. I'll do this 
in next days, too.

* skas-reorganize and skas-add-SYSEMU_SINGLESTEP: from Bodo Stroesser, they 
add the SYSEMU_SINGLESTEP mode. For 2.6.9 and beyond, I've cleaned up a lot 
the second one to ease porting to 2.6.10.

* sysaudit-singlestep-umlhost.patch: for host >= 2.6.9, it fixes a bad 
interaction between syscall auditing and ptracing. A version of this must 
also go in 2.6.11.

* fix-dumpable-handling.patch: this implemented a feature / bug fix requested 
by Michael Richardson <mcr@sandelman.ottawa.on.ca>. I.e., with this, in 
normal cases, UML *is* allowed to dump core and be seen inside /proc - (until 
now it was treated as if it was a setuid process or one which changed UID / 
GID). If I did any error, however, it could allow privilege escalation. Well, 
I've thought a bit about this, however I'll think even more before putting it 
into a release (I wrote this more than one month ago).

-- 
Paolo Giarrusso, aka Blaisorblade
Linux registered user n. 292729
http://www.user-mode-linux.org/~blaisorblade




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Christopher S. Aker]

FYI: Been testing this pretty heavily.  Seems great -- decided to move it into
production yesterday.  It's now running on 10 hosts, and I'm happy to report all is
well.

I just rolled a 2.6.11-rc4+cfq-ts-21 host kernel and I'll be testing this today.

Thanks!
-Chris



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Christopher S. Aker]

> I just rolled a 2.6.11-rc4+cfq-ts-21 host kernel and I'll be testing this today.

2.6.11 doesn't seem to be ready for host duty yet:

----
[root@host27 root]# uname -a
Linux host27.linode.com 2.6.11-rc4-1-bigmem64 #1 SMP Mon Feb 14 15:55:09 EST 2005
i686 i686 i386 GNU/Linux
----

[root@host27 root]# /vbin/kernel/2.6.11-rc3-mm2-aio
Checking for /proc/mm...found
Checking for the skas3 patch in the host...found
Checking PROT_EXEC mmap in /tmp...OK

[root@host27 root]#

----
[root@host27 root]# /vbin/kernel/2.6.11-rc3-mm2-aio
Checking for /proc/mm...found
Checking for the skas3 patch in the host...found
Checking PROT_EXEC mmap in /tmp...OK

[root@host27 root]# /vbin/kernel/2.6.10-linode11
Checking for the skas3 patch in the host...found
Checking for /proc/mm...found
Checking PROT_EXEC mmap in /tmp...OK
Linux version 2.6.10-linode11 (root@nova1.theshore.net) (gcc version 3.3.3 20040412
(Red Hat Linux 3.3.3-7)) #1 Wed Jan 19 14:49:24 EST 2005
Built 1 zonelists
Kernel command line: root=98:0
PID hash table entries: 256 (order: 8, 4096 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 27024k available
Security Framework v1.0.0 initialized
Capability LSM initialized
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for host processor cmov support...Yes
Checking for host processor xmm support...No
Checking that ptrace can change system call numbers...OK
Checking syscall emulation patch for ptrace...<0>Kernel panic - not syncing:
check_sysemu : expected SIGTRAP, got status = 256

EIP: 0000:[<00000000>] CPU: 0 Not tainted EFLAGS: 00000000
    Not tainted
EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000
ESI: 00000000 EDI: 00000000 EBP: 00000000 DS: 0000 ES: 0000
Call Trace:
 [<80033994>] vprintk+0xe4/0x134
 [<80041616>] notifier_call_chain+0x1e/0x38
 [<80032e65>] panic+0x55/0x104
 [<803513c3>] check_sysemu+0x33/0x150
 [<80351425>] check_sysemu+0x95/0x150
 [<803515b3>] check_ptrace+0xd3/0x124
 [<80022f04>] start_kernel_proc+0x0/0x2c
 [<80008bf9>] check_bugs+0xd/0x1c
 [<80022f04>] start_kernel_proc+0x0/0x2c
 [<80002553>] start_kernel+0x163/0x1a4
 [<8000250c>] start_kernel+0x11c/0x1a4
 [<80313781>] __sigjmp_save+0x2d/0x3c
 [<80022f29>] start_kernel_proc+0x25/0x2c
 [<80019e95>] run_kernel_thread+0x45/0x4c
 [<80022f04>] start_kernel_proc+0x0/0x2c
 [<80019e70>] run_kernel_thread+0x20/0x4c
 [<80022f04>] start_kernel_proc+0x0/0x2c
 [<80022cb7>] new_thread_handler+0x63/0x94
 [<80022f04>] start_kernel_proc+0x0/0x2c
 [<803138c8>] __restore+0x0/0x8
 [<80313b21>] kill+0x11/0x20

----
[root@host27 root]# /vbin/kernel/2.4.29-linode39-1um
Checking for the skas3 patch in the host...found
Checking for /proc/mm...found
Checking PROT_EXEC mmap in /tmp...OK
Checking for /dev/anon on the host...Not available (open failed with errno 6)
Linux version 2.4.29-linode39-1um (root@nova1.theshore.net) (gcc version 3.3.3
20040412 (Red Hat Linux 3.3.3-7)) #1 Wed Jan 19 12:22:14 EST 2005
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ubd0
Calibrating delay loop... 3853.51 BogoMIPS
Memory: 27296k available
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for host processor cmov support...Yes
Checking for host processor xmm support...No
Checking that ptrace can change system call numbers...OK
Checking syscall emulation patch for ptrace...<0>Kernel panic: check_ptrace :
expected SIGTRAP, got status = 256
In idle task - not syncing
 <6>SysRq : Show Regs

EIP: 0000:[<00000000>] CPU: 0 Not tainted EFLAGS: 00000000
    Not tainted
EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000
ESI: 00000000 EDI: 00000000 EBP: 00000000 DS: 0000 ES: 0000
Call Trace: [<80312ce7>] [<8031a484>] [<800125cf>] [<801a9f8e>] [<80195875>]
   [<8001f15e>] [<80014bc7>] [<8000755e>] [<800075ae>] [<8033a198>] [<8031a0bb>]
   [<80199d5c>] [<80007b91>] [<800024cb>] [<80199d5c>] [<80002472>] [<802ab4f1>]
   [<80199d81>] [<80199d5c>] [<80190441>] [<80199d5c>] [<8019041c>] [<80199d5c>]
   [<80199ac5>] [<80199d5c>] [<80199561>] [<802ab638>] [<802ab891>]


-Chris



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Christopher S. Aker]

> > [root@host27 root]# /vbin/kernel/2.6.11-rc3-mm2-aio
> > Checking for /proc/mm...found
> > Checking for the skas3 patch in the host...found
> > Checking PROT_EXEC mmap in /tmp...OK
>
> Does this have my exception-table patch in it?
>
> Jeff

Yes.  This is the same UML kernel I had trouble with on my 2.6.7 host, with an older
SKAS version.

-Chris



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Jeff Dike]

> [root@host27 root]# /vbin/kernel/2.6.11-rc3-mm2-aio
> Checking for /proc/mm...found
> Checking for the skas3 patch in the host...found
> Checking PROT_EXEC mmap in /tmp...OK

Does this have my exception-table patch in it?

				Jeff



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Bodo Stroesser]

[-- Attachment #1: Type: text/plain, Size: 343 bytes --]

Christopher S. Aker wrote:
>>I just rolled a 2.6.11-rc4+cfq-ts-21 host kernel and I'll be testing this today.
> 
> 
> 2.6.11 doesn't seem to be ready for host duty yet:
> 
Yes. There is a bug in the v8-rc2 patch for 2.6.11
Try the attached fix, please.

       Bodo


To BlaisorBlade: I tested the v8-rc2 for 2.6.9, too. It works fine for me.

[-- Attachment #2: skas-2.6.11-v8-rc2-fix.patch --]
[-- Type: text/x-diff, Size: 732 bytes --]

From: Bodo Stroesser <bstroesser@fujitsu-siemens.com>

This patch fixes a bug in SKAS3 host patch v8-rc2 for 2.6.11,
that causes syscalls not to be intercepted, when PTRACE_SYSEMU
is used.

Signed-off-by: Bodo Stroesser <bstroesser@fujitsu-siemens.com>
---

--- linux-2.6.11-rc4/arch/i386/kernel/ptrace.c.orig	2005-02-15 15:33:26.000000000 +0100
+++ linux-2.6.11-rc4/arch/i386/kernel/ptrace.c	2005-02-15 15:58:18.000000000 +0100
@@ -802,7 +802,7 @@ int do_syscall_trace(struct pt_regs *reg
 	if (is_singlestep)
 		send_sigtrap(current, regs, 0);
 
-	if (!test_thread_flag(TIF_SYSCALL_TRACE))
+	if (!test_thread_flag(TIF_SYSCALL_TRACE) && !is_sysemu)
 		return 0;
 
 	/* the 0x80 provides a way for the tracing parent to distinguish

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Blaisorblade]

On Tuesday 15 February 2005 16:23, Bodo Stroesser wrote:
> Christopher S. Aker wrote:
> >>I just rolled a 2.6.11-rc4+cfq-ts-21 host kernel and I'll be testing this
> >> today.
> >
> > 2.6.11 doesn't seem to be ready for host duty yet:
>
> Yes. There is a bug in the v8-rc2 patch for 2.6.11
Agreed, sorry for forgetting it.
> Try the attached fix, please.

>        Bodo
>
>
> To BlaisorBlade: I tested the v8-rc2 for 2.6.9, too. It works fine for me.
Nice... have you any remarks about fix-dumpable-handling.patch? That's the 
more important doubt for me.
-- 
Paolo Giarrusso, aka Blaisorblade
Linux registered user n. 292729
http://www.user-mode-linux.org/~blaisorblade




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel

Re: [uml-devel] SKAS-v8: RC2 released against 2.6.7 - 2.6.11-rc3-bk6 kernels

[Christopher S. Aker]

> Yes. There is a bug in the v8-rc2 patch for 2.6.11
> Try the attached fix, please.

I now have a few hosts running 2.6.11-rc4 with the fix you posted.  It's been working
great.

Thanks!
-Chris



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel