From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752011AbdEFEG5 (ORCPT ); Sat, 6 May 2017 00:06:57 -0400 Received: from mail.linuxfoundation.org ([140.211.169.12]:50828 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750707AbdEFEGt (ORCPT ); Sat, 6 May 2017 00:06:49 -0400 Date: Fri, 5 May 2017 21:06:41 -0700 From: Greg KH To: kernel-hardening@lists.openwall.com, Petr Mladek , Sergey Senozhatsky Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , Steven Rostedt , William Roberts , Chris Fries , Dave Weinstein Subject: [RFC 00/06] printk: add more new kernel pointer filter options. Message-ID: <20170506040641.GA32707@kroah.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.8.2 (2017-04-18) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Here's a short patch series from Chris Fries and Dave Weinstein that implement some new restrictions when printing out kernel pointers, as well as the ability to whitelist kernel pointers where needed. These patches are based on work from William Roberts, and also is inspired by grsecurity's %pP to specifically whitelist a kernel pointer, where it is always needed, like the last patch in the series shows, in the UIO drivers (UIO requires that you know the address, it's a hardware address, nothing wrong with seeing that...) I haven't done much to this patch series, only forward porting it from an older kernel release (4.4) and a few minor tweaks. It applies cleanly on top of 4.11 as well as Linus's current development tree (10502 patches into the 4.12-rc1 merge window). I'm posting it now for comments if anyone sees anything wrong with this approach, or thinks the things that are being whitelisted should not be? thanks, greg k-h Documentation/printk-formats.txt | 15 +++- Documentation/sysctl/kernel.txt | 11 +++ arch/arm64/kernel/traps.c | 4 - drivers/uio/uio.c | 4 - include/linux/kallsyms.h | 2 kernel/printk/printk.c | 2 kernel/sysctl.c | 6 - lib/vsprintf.c | 128 ++++++++++++++++++++++++++++----------- 8 files changed, 123 insertions(+), 49 deletions(-) From mboxrd@z Thu Jan 1 00:00:00 1970 Date: Fri, 5 May 2017 21:06:41 -0700 From: Greg KH Message-ID: <20170506040641.GA32707@kroah.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Subject: [kernel-hardening] [RFC 00/06] printk: add more new kernel pointer filter options. To: kernel-hardening@lists.openwall.com, Petr Mladek , Sergey Senozhatsky Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , Steven Rostedt , William Roberts , Chris Fries , Dave Weinstein List-ID: Here's a short patch series from Chris Fries and Dave Weinstein that implement some new restrictions when printing out kernel pointers, as well as the ability to whitelist kernel pointers where needed. These patches are based on work from William Roberts, and also is inspired by grsecurity's %pP to specifically whitelist a kernel pointer, where it is always needed, like the last patch in the series shows, in the UIO drivers (UIO requires that you know the address, it's a hardware address, nothing wrong with seeing that...) I haven't done much to this patch series, only forward porting it from an older kernel release (4.4) and a few minor tweaks. It applies cleanly on top of 4.11 as well as Linus's current development tree (10502 patches into the 4.12-rc1 merge window). I'm posting it now for comments if anyone sees anything wrong with this approach, or thinks the things that are being whitelisted should not be? thanks, greg k-h Documentation/printk-formats.txt | 15 +++- Documentation/sysctl/kernel.txt | 11 +++ arch/arm64/kernel/traps.c | 4 - drivers/uio/uio.c | 4 - include/linux/kallsyms.h | 2 kernel/printk/printk.c | 2 kernel/sysctl.c | 6 - lib/vsprintf.c | 128 ++++++++++++++++++++++++++++----------- 8 files changed, 123 insertions(+), 49 deletions(-)