From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Lutomirski Subject: [PATCH v2 0/2] Fix auditsc DoS and mark it BROKEN Date: Wed, 28 May 2014 18:43:59 -0700 Message-ID: Return-path: Sender: linux-kernel-owner@vger.kernel.org To: Andy Lutomirski , Philipp Kern , "H. Peter Anvin" , linux-kernel@vger.kernel.org, "H. J. Lu" , Eric Paris , security@kernel.org, greg@kroah.com, linux-audit@redhat.com List-Id: linux-audit@redhat.com CONFIG_AUDITSYSCALL is awful. Patch 2 enumerates some reasons. Patch 1 fixes a nasty DoS and possible information leak. It should be applied and backported. Patch 2 is optional. I leave it to other peoples' judgment. Andy Lutomirski (2): auditsc: audit_krule mask accesses need bounds checking audit: Move CONFIG_AUDITSYSCALL into staging and update help text Andy Lutomirski (2): auditsc: audit_krule mask accesses need bounds checking audit: Mark CONFIG_AUDITSYSCALL BROKEN and update help text init/Kconfig | 13 ++++++++----- kernel/auditsc.c | 27 ++++++++++++++++++--------- 2 files changed, 26 insertions(+), 14 deletions(-) -- 1.9.3