From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751532Ab1HMQd6 (ORCPT ); Sat, 13 Aug 2011 12:33:58 -0400 Received: from mail-fx0-f46.google.com ([209.85.161.46]:43094 "EHLO mail-fx0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751253Ab1HMQd4 (ORCPT ); Sat, 13 Aug 2011 12:33:56 -0400 Date: Sat, 13 Aug 2011 20:32:52 +0400 From: Vasiliy Kulikov To: "H. Peter Anvin" Cc: Thomas Gleixner , Ingo Molnar , James Morris , x86@kernel.org, kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [kernel-hardening] Re: [RFC] x86: restrict pid namespaces to 32 or 64 bit syscalls Message-ID: <20110813163252.GA18458@albatros> References: <20110812150304.GC16880@albatros> <4E45884B.8030303@zytor.com> <20110813062246.GC3851@albatros> <36fcaf94-2e99-47cb-a835-aefb79856429@email.android.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <36fcaf94-2e99-47cb-a835-aefb79856429@email.android.com> User-Agent: Mutt/1.5.20 (2009-06-14) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Aug 13, 2011 at 10:41 -0500, H. Peter Anvin wrote: > IA64 is totally different. I didn't say all IA-32 compatibility layer of x86 is a crap, surely no. But there is some code, which is poorly tested exactly because it is compatibility code. One relatively recent example: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3e645d6b485446c54c6745c5e2cf5c528fe4deec > I'm extremely sceptical to this patch; > it feels like putting code in a super-hot path to paper over a problem that has to be fixed anyway. I'll move the check to the tracesys branch, which is not a hot path, in the next RFC version, so this should not be a problem. Thanks, -- Vasiliy Kulikov http://www.openwall.com - bringing security into open computing environments