From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.5 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92E18C43460 for ; Fri, 9 Apr 2021 23:28:45 +0000 (UTC) Received: from shelob.surriel.com (shelob.surriel.com [96.67.55.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 1A882610CA for ; Fri, 9 Apr 2021 23:28:45 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1A882610CA Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=vt.edu Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=kernelnewbies-bounces@kernelnewbies.org Received: from localhost ([::1] helo=shelob.surriel.com) by shelob.surriel.com with esmtp (Exim 4.94) (envelope-from ) id 1lV0Y5-0005Ok-S2; Fri, 09 Apr 2021 19:28:25 -0400 Received: from mail-qk1-x72f.google.com ([2607:f8b0:4864:20::72f]) by shelob.surriel.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94) (envelope-from ) id 1lV0Y3-0005OJ-H4 for kernelnewbies@kernelnewbies.org; Fri, 09 Apr 2021 19:28:23 -0400 Received: by mail-qk1-x72f.google.com with SMTP id g15so7599714qkl.4 for ; Fri, 09 Apr 2021 16:28:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vt-edu.20150623.gappssmtp.com; s=20150623; h=sender:from:to:cc:subject:in-reply-to:references:mime-version :content-transfer-encoding:date:message-id; bh=8X4qcfXiEyb8Od+TR2/ADrVsCC9azYx1TTWvNHRlFTg=; b=IyqNeNfeeDuH4wlofp482M8Vs4VSJ94cRBvGsquc82ueJGPjpPcA2N9hEABevPXEWZ +vZ43DOSeJpAiPOLhrQ0xatctmXfkAtz2XSrPbNJMCbQHNwVGTmVXFkLdWXu2sacfmBr n/eBURMZHIOkUFxIu/kO66qy6DB7tQ1QZ5M4QfW6j2IerOLV6ILKR2AOiiwa0rpNdhus +s+jRRwe4MyzS6JVOA9r4Cbx6juVmXDi4j97dN1cNYlAjNxXNO3Z0qte1bfUsU6rQC8X BwRdWRD0cdngeNWHITpCcmALZ2jU+UcVNsEdvlGopRoFY7aEhSNtzkvWW0y/DI+txrBL gdwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:in-reply-to:references :mime-version:content-transfer-encoding:date:message-id; bh=8X4qcfXiEyb8Od+TR2/ADrVsCC9azYx1TTWvNHRlFTg=; b=iJySo9MwRqd2SLfUZGFNTWKItck1cNmQsHnxMS5DQf6wqMpXiGGVR3AGk234pwd0BU sWosxbmVO+thLxxbhQHnfSQH5VFvovzortuALdsgCuBaP1XRhsV56Vi6O2yJgCp4NT9r TNWN1sfF4ZaWwR4UA160LCy4InrP1QODDOXsEZuQ50QVU1hIvSa7zwHZQwA25zoY0zen VkbW8dhAEKRYDYJVd7n/LSC1mtLZvKoqznvlw7gzvARY3LtbtfyDD8pwsndXTnXaiFFY ISKASkRzGSDecsi+KcBuFnvdFzTy794xIk7Z3sdGb5QnPFgvxxvQXq1QOrpN2r5yjPbN QwKg== X-Gm-Message-State: AOAM5331BHRzh/aovrFiPJX5RRIepLpK5I9zwobaybVmca2SHdYW9m0O jVnSQc8zcjacXo41p06fJSTyQA== X-Google-Smtp-Source: ABdhPJzT5HjzTsJ8VR4VLidzKcPEBibPtlSR5Ub7k4FF+xysXg9oo7m7My399Qzv9rjvSumvfosXow== X-Received: by 2002:a37:41ca:: with SMTP id o193mr16860439qka.56.1618010902151; Fri, 09 Apr 2021 16:28:22 -0700 (PDT) Received: from turing-police ([2601:5c0:c380:d61::359]) by smtp.gmail.com with ESMTPSA id b198sm2885776qkg.10.2021.04.09.16.28.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 09 Apr 2021 16:28:21 -0700 (PDT) From: "Valdis Kl=?utf-8?Q?=c4=93?=tnieks" X-Google-Original-From: "Valdis Kl=?utf-8?Q?=c4=93?=tnieks" X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.7+dev To: Andi Kleen Subject: Re: Notify special task kill using wait* functions In-Reply-To: <20210409150621.GJ3762101@tassilo.jf.intel.com> References: <20210403070226.GA3002@ubuntu> <145687.1617485641@turing-police> <20210404094837.GA3263@ubuntu> <193167.1617570625@turing-police> <20210405073147.GA3053@ubuntu> <115437.1617753336@turing-police> <20210407175151.GA3301@ubuntu> <184666.1617827926@turing-police> <20210408015148.GB3762101@tassilo.jf.intel.com> <20210409142933.GA3150@ubuntu> <20210409150621.GJ3762101@tassilo.jf.intel.com> Mime-Version: 1.0 Date: Fri, 09 Apr 2021 19:28:20 -0400 Message-ID: <109781.1618010900@turing-police> Cc: kernel-hardening@lists.openwall.com, John Wood , Kees Cook , kernelnewbies@kernelnewbies.org X-BeenThere: kernelnewbies@kernelnewbies.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Learn about the Linux kernel List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1647858662173858534==" Errors-To: kernelnewbies-bounces@kernelnewbies.org --===============1647858662173858534== Content-Type: multipart/signed; boundary="==_Exmh_1618010900_95215P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit --==_Exmh_1618010900_95215P Content-Type: text/plain; charset=us-ascii On Fri, 09 Apr 2021 08:06:21 -0700, Andi Kleen said: > Thinking more about it what I wrote above wasn't quite right. The cache > would only need to be as big as the number of attackable services/suid > binaries. Presumably on many production systems that's rather small, > so a cache (which wouldn't actually be a cache, but a complete database) > might actually work. You also need to consider non-suid things called by suid things that don't sanitize input sufficiently before invocation... Thinking about at - is it really a good thing to try to do this in kernelspace? Or is 'echo 1 > /proc/sys/kernel/print-fatal-signals' and a program to watch the dmesg and take action more appropriate? A userspace monitor would have more options (though a slightly higher risk of race conditions). --==_Exmh_1618010900_95215P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Comment: Exmh version 2.9.0 11/07/2018 iQIVAwUBYHDjEwdmEQWDXROgAQIjYA/9H314PauR3vcLGuhB5j8IlyAFuQL17Ej1 GU01f0+EsyMznqiNSnA8ZBM9LKAfZlc4/qtINqAWzWePT9vHzic4cblATfVQv+W4 1JnXYtZ66dT51VbJ5hlPDL/C4Y/GkPMdNtmUFsOSu2XCUHT8dTMGdvgn6OmFUHtZ q4ZnT38Rr04zkUOLAOR+NP+xK/sEcRYdMkmEc0qZBfwFHJBzatC8JcdhhtGrIZu9 mh6PX3K74GWMeGb0xDHFTEnhRa2AEnaWSGXy9ZMyXAnuQPyXb0iecfc3R/xkEofI W32+d8RGaX9TlE0QFA5dzl/8lU5A+vorLfZjMfqV/U5hGQvnsIzASAURehR+1dEE pMLyohVb9sMevTbA/Df88vQAHKif76Rg9Q3FMT4L1/DstlgN1ywR6sZgxOmR3BAO dxtAdG0SX/sHHIpWlp00N7n1wY9OO88SCHmoFjYgtsvT13GRwRWdIpfkh6j9ctQK jm+VP2+waHih9ur2YxxAOv3kSMC4seetV0Xvs0cfOKr3MDp3kNVjLv6qHK71sjiH zN2goPtFDEbMtAWBG9aT6X46HL0R5x2d+RmSwQxNpMzKLpqiQDzRJgeOfMVAALY6 nlbmEujM2vMFv7uefXefSWqswqacCw+z728kBfa6ythZkSQ11zwhJS/OrxyLxTg7 cst3qofMPvU= =y9hs -----END PGP SIGNATURE----- --==_Exmh_1618010900_95215P-- --===============1647858662173858534== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies --===============1647858662173858534==--