From: Greg KH <gregkh@linuxfoundation.org> To: kernel-hardening@lists.openwall.com, Petr Mladek <pmladek@suse.com>, Sergey Senozhatsky <sergey.senozhatsky@gmail.com> Cc: linux-kernel@vger.kernel.org, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will.deacon@arm.com>, Steven Rostedt <rostedt@goodmis.org>, William Roberts <william.c.roberts@intel.com>, Chris Fries <cfries@google.com>, Dave Weinstein <olorin@google.com> Subject: [RFC 4/6] lib: vsprintf: default kptr_restrict to the maximum value Date: Fri, 5 May 2017 21:07:37 -0700 [thread overview] Message-ID: <20170506040737.GE32707@kroah.com> (raw) In-Reply-To: <20170506040641.GA32707@kroah.com> From: Dave Weinstein <olorin@google.com> Set the initial value of kptr_restrict to the maximum setting rather than the minimum setting, to ensure that early boot logging is not leaking information. Cc: William Roberts <william.c.roberts@intel.com> Cc: Chris Fries <cfries@google.com> Signed-off-by: Dave Weinstein <olorin@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> --- lib/vsprintf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/vsprintf.c b/lib/vsprintf.c index 75a49795fcae..404d477d4bd2 100644 --- a/lib/vsprintf.c +++ b/lib/vsprintf.c @@ -395,7 +395,7 @@ struct printf_spec { #define FIELD_WIDTH_MAX ((1 << 23) - 1) #define PRECISION_MAX ((1 << 15) - 1) -int kptr_restrict __read_mostly; +int kptr_restrict __read_mostly = 4; /* * Always cleanse %p and %pK specifiers -- 2.12.2
WARNING: multiple messages have this Message-ID (diff)
From: Greg KH <gregkh@linuxfoundation.org> To: kernel-hardening@lists.openwall.com, Petr Mladek <pmladek@suse.com>, Sergey Senozhatsky <sergey.senozhatsky@gmail.com> Cc: linux-kernel@vger.kernel.org, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will.deacon@arm.com>, Steven Rostedt <rostedt@goodmis.org>, William Roberts <william.c.roberts@intel.com>, Chris Fries <cfries@google.com>, Dave Weinstein <olorin@google.com> Subject: [kernel-hardening] [RFC 4/6] lib: vsprintf: default kptr_restrict to the maximum value Date: Fri, 5 May 2017 21:07:37 -0700 [thread overview] Message-ID: <20170506040737.GE32707@kroah.com> (raw) In-Reply-To: <20170506040641.GA32707@kroah.com> From: Dave Weinstein <olorin@google.com> Set the initial value of kptr_restrict to the maximum setting rather than the minimum setting, to ensure that early boot logging is not leaking information. Cc: William Roberts <william.c.roberts@intel.com> Cc: Chris Fries <cfries@google.com> Signed-off-by: Dave Weinstein <olorin@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> --- lib/vsprintf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/vsprintf.c b/lib/vsprintf.c index 75a49795fcae..404d477d4bd2 100644 --- a/lib/vsprintf.c +++ b/lib/vsprintf.c @@ -395,7 +395,7 @@ struct printf_spec { #define FIELD_WIDTH_MAX ((1 << 23) - 1) #define PRECISION_MAX ((1 << 15) - 1) -int kptr_restrict __read_mostly; +int kptr_restrict __read_mostly = 4; /* * Always cleanse %p and %pK specifiers -- 2.12.2
next prev parent reply other threads:[~2017-05-06 4:07 UTC|newest] Thread overview: 35+ messages / expand[flat|nested] mbox.gz Atom feed top 2017-05-06 4:06 [RFC 00/06] printk: add more new kernel pointer filter options Greg KH 2017-05-06 4:06 ` [kernel-hardening] " Greg KH 2017-05-06 4:06 ` [RFC 1/6] lib: vsprintf: additional kernel pointer filtering options Greg KH 2017-05-06 4:06 ` [kernel-hardening] " Greg KH 2017-05-16 11:58 ` Petr Mladek 2017-05-16 11:58 ` [kernel-hardening] " Petr Mladek 2017-05-18 14:12 ` Greg KH 2017-05-18 14:12 ` [kernel-hardening] " Greg KH 2017-05-06 4:07 ` [RFC 2/6] lib: vsprintf: whitelist stack traces Greg KH 2017-05-06 4:07 ` [kernel-hardening] " Greg KH 2017-05-06 4:07 ` [RFC 3/6] lib: vsprintf: physical address kernel pointer filtering options Greg KH 2017-05-06 4:07 ` [kernel-hardening] " Greg KH 2017-05-06 10:48 ` Ian Campbell 2017-05-06 4:07 ` Greg KH [this message] 2017-05-06 4:07 ` [kernel-hardening] [RFC 4/6] lib: vsprintf: default kptr_restrict to the maximum value Greg KH 2017-05-06 4:07 ` [RFC 5/6] lib: vsprintf: Add "%paP", "%padP" options Greg KH 2017-05-06 4:07 ` [kernel-hardening] " Greg KH 2017-05-06 4:42 ` Joe Perches 2017-05-06 4:42 ` [kernel-hardening] " Joe Perches 2017-05-06 5:00 ` Greg KH 2017-05-06 5:00 ` [kernel-hardening] " Greg KH 2017-05-16 14:41 ` Petr Mladek 2017-05-16 14:41 ` [kernel-hardening] " Petr Mladek 2017-05-18 14:12 ` Greg KH 2017-05-18 14:12 ` [kernel-hardening] " Greg KH 2017-05-06 4:07 ` [RFC 6/6] drivers: uio: Un-restrict sysfs pointers for UIO Greg KH 2017-05-06 4:07 ` [kernel-hardening] " Greg KH 2017-05-11 1:37 ` [RFC 00/06] printk: add more new kernel pointer filter options Sergey Senozhatsky 2017-05-11 1:37 ` [kernel-hardening] " Sergey Senozhatsky 2017-05-16 21:36 ` Roberts, William C 2017-05-16 21:36 ` [kernel-hardening] " Roberts, William C 2017-05-18 14:13 ` Greg KH 2017-05-18 14:13 ` [kernel-hardening] " Greg KH 2017-05-19 20:25 ` Roberts, William C 2017-05-19 20:25 ` [kernel-hardening] " Roberts, William C
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20170506040737.GE32707@kroah.com \ --to=gregkh@linuxfoundation.org \ --cc=catalin.marinas@arm.com \ --cc=cfries@google.com \ --cc=kernel-hardening@lists.openwall.com \ --cc=linux-kernel@vger.kernel.org \ --cc=olorin@google.com \ --cc=pmladek@suse.com \ --cc=rostedt@goodmis.org \ --cc=sergey.senozhatsky@gmail.com \ --cc=will.deacon@arm.com \ --cc=william.c.roberts@intel.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.