From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-security-module-owner@kernel.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.7 required=3.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
Received: from mail.kernel.org (mail.kernel.org [198.145.29.99])
	by smtp.lore.kernel.org (Postfix) with ESMTP id CF6E1C433DB
	for <linux-security-module@archiver.kernel.org>; Sat, 20 Mar 2021 15:50:52 +0000 (UTC)
Received: from vger.kernel.org (vger.kernel.org [23.128.96.18])
	by mail.kernel.org (Postfix) with ESMTP id 8E3DD6196A
	for <linux-security-module@archiver.kernel.org>; Sat, 20 Mar 2021 15:50:52 +0000 (UTC)
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S229926AbhCTPuV (ORCPT
        <rfc822;linux-security-module@archiver.kernel.org>);
        Sat, 20 Mar 2021 11:50:21 -0400
Received: from mout.gmx.net ([212.227.17.22]:56877 "EHLO mout.gmx.net"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S229886AbhCTPuS (ORCPT
        <rfc822;linux-security-module@vger.kernel.org>);
        Sat, 20 Mar 2021 11:50:18 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net;
        s=badeba3b8450; t=1616255380;
        bh=AD3PrN+vf2mQ+8MKDbQ8ZeCfvzIHl3vXZnPV0wZtj5o=;
        h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To;
        b=ZrpfWcx4qLiCVKdBZb9jsRreKGVU4XjsPhtS8dJj3xCXnBUEUeyx/fZsqQR0D6dcK
         Rw498Q7k36nJ7r7QHR2kERzsmrjxD9JpHjTJc7HcBGzOmwV1wZRWx21IeZ7//+jdvB
         kLQqvxnPw++zbDxm55SGU0buSzhELsMb6M98jH1w=
X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c
Received: from ubuntu ([83.52.229.153]) by mail.gmx.net (mrgmx105
 [212.227.17.174]) with ESMTPSA (Nemesis) id 1N95eJ-1liUhH0mkJ-016Auk; Sat, 20
 Mar 2021 16:49:40 +0100
Date:   Sat, 20 Mar 2021 16:49:36 +0100
From:   John Wood <john.wood@gmx.com>
To:     Kees Cook <keescook@chromium.org>
Cc:     John Wood <john.wood@gmx.com>, Jann Horn <jannh@google.com>,
        Randy Dunlap <rdunlap@infradead.org>,
        Jonathan Corbet <corbet@lwn.net>,
        James Morris <jmorris@namei.org>,
        Shuah Khan <shuah@kernel.org>,
        "Serge E. Hallyn" <serge@hallyn.com>,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
        Andi Kleen <ak@linux.intel.com>,
        kernel test robot <oliver.sang@intel.com>,
        linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org,
        linux-security-module@vger.kernel.org,
        linux-kselftest@vger.kernel.org,
        kernel-hardening@lists.openwall.com
Subject: Re: [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM
Message-ID: <20210320154936.GE3023@ubuntu>
References: <20210307113031.11671-1-john.wood@gmx.com>
 <20210307113031.11671-7-john.wood@gmx.com>
 <202103172105.F88F6745@keescook>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <202103172105.F88F6745@keescook>
X-Provags-ID: V03:K1:EeL7EnPKcSmX1if1wHYmRNesWmU0Wkazr3PMeRYXhdRSg1a6ggo
 yg+MD7nT2DiQJFysClafW8A2qO7MROy7qBtV1CF5wMWNamxAw6lxq4IEoThIWCO6V1O70Y5
 kGY5YGfnxojkkC5RA12bes65ZPxFKQoI8rR8XZeyoTCNgpHcNwkveOTvMis/bODP2lrk1UH
 8JOAdenmseC/yktwz1TRw==
X-UI-Out-Filterresults: notjunk:1;V03:K0:qAfb5bWlDgc=:FV7wh3gVsW21/3bpO8jU48
 AWXiqMbRLm4bToSaVxj0FvuYscejs0zbeSfh2406n1c12nQg8CRGqsGBY9fqh+ccmLIRxLZVL
 rgsp5u2VX6ozU8r1ui1zsMBM533kyjusDC/aTQJHglGIm1Ql2S6YoKX/z6246SpZdSy+jRf2E
 9YDttU6eMqro5/fz0jDWtv7XKgGWNYh1rKtyjC8PmXZdFVtW193aV1+PaV3OSUt4o++glqw/J
 XFnIoOP+k5/c5bxbuHT3IxuwSCZM7212buofgkJe0QqMGGXL0usR7dmrkoesv7EHvTEp/ssKZ
 D55mgYertyJ5rZ+Y3QaYeoBDt+cPPF6P+hOl39cUWivHtC2Vydex/eYM1wIywoqSaKyhwEXbf
 UaYB7XnBRvq/00GkZ5BnptLXvcCGVcmxC6cIaIt2Qxi1wXIKcSAE630zj4ASvqWPqsNnZ192q
 Ceasnba1iRxtP3qxNkN3oRf1EHd5eaS0vhC96aXVUssZOK4ifGLtpxaTSW1amI6z2AOm6WY5T
 KDCe0UQT29IefWG8c0Y5QLnUcENiPbsfOsOpnrCV+L1Jf5UsrZKc9SEH8UHJBiwBLFSZ3aT9B
 h2X712bfatiB5B3nnFIKbeNBgssH8eaEvU7PQHL/QTryrnO4LOge7IcGaZZ2tTjoBqYBJsEAL
 h49Fl3f5IBNBLaahEgSaaFhON6D6oBs2mpdg1DgzElIsOVGHHdFLH9Z8506WV7RfM8dHW5HDb
 o2HHpcrVQbOgYZ79qSnfH6ds7djMbfVRIdYP5tDwK1Zc6p7qjyXKABjwTA7q9Dlh0KPD8Hkfo
 DKR+ynm20ZsgaNAnpTKXQMeFH/OmvqR9ZLDWGxxDrOHFfxNmtmSVD4FDt5nTCJ1mNwICuuXTd
 VTlTQpw5QZg5AWNxfKUA==
Content-Transfer-Encoding: quoted-printable
Precedence: bulk
List-ID: <linux-security-module.vger.kernel.org>

On Wed, Mar 17, 2021 at 09:08:17PM -0700, Kees Cook wrote:
> On Sun, Mar 07, 2021 at 12:30:29PM +0100, John Wood wrote:
> > +
> > +count_fork_matches()
> > +{
> > +	dmesg | grep "brute: Fork brute force attack detected" | wc -l
>
> This may be unstable if the dmesg scrolls past, etc. See how
> lkdtm/run.sh handles this with a temp file and "comm".

Thanks, I will correct this for the next version.

John Wood