Re: [kernel-hardening] HARDEN_VM86

[Vasiliy Kulikov <segoon@openwall.com>]

Solar,

On Wed, Jun 15, 2011 at 18:38 +0400, Solar Designer wrote:
> If upstream is fine with sysctl's setting gids, and this appears to be
> the case, then let's go for this.

I see one problem with gid style - as gid is a per pid_namespace thing,
it should be configurable per pid_namespace.

But on the other hand, a potential bug might lead to a privilege
escalation (not a in-namespace root, but e.g. arbitrary write into any
physical address) due to the nature of the syscall.  So, in-namespace
root shouldn't be able to configure who is able to do vm86(2), otherwise
it is able to gain full root.

I'm confused :\

-- 
Vasiliy