From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3BD79C54EE9 for ; Sun, 11 Sep 2022 15:12:44 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229547AbiIKPMm (ORCPT ); Sun, 11 Sep 2022 11:12:42 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:51146 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229577AbiIKPMj (ORCPT ); Sun, 11 Sep 2022 11:12:39 -0400 Received: from mail-pl1-x62e.google.com (mail-pl1-x62e.google.com [IPv6:2607:f8b0:4864:20::62e]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 78D6C11822 for ; Sun, 11 Sep 2022 08:12:37 -0700 (PDT) Received: by mail-pl1-x62e.google.com with SMTP id x1so6275416plv.5 for ; Sun, 11 Sep 2022 08:12:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date; bh=ZcxumOMOxR8h0dhZ+ethDLl0FdJsx3OvZDg1SpCAq40=; b=a9W9mPQvUBOCJ+6Ik7k6JVXho46WN0XWo71pLbJ2u2kRHcsG/UqFFXkJuKDqyZNP5i eQb+/xp0SaGZXLSonyMFmGHso66NzbP3lWnNvONotX7P2v0aKul4tURdbxP2gzWgCQMM TSUE07wKNc4hZhsu8rzzzSOeCUmqNZaQEaw/U= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date; bh=ZcxumOMOxR8h0dhZ+ethDLl0FdJsx3OvZDg1SpCAq40=; b=5t0eQqj7R8V1HOJ0a479muYduAQau1gt+T0gV3BjlRM+AneGQ/gos9VBsa+PnjNfVm Pxgxt8mQ8uPmyS4yxsg3UkBqhzqoY2En7YZv4X+3D1OWGsPZ5S5UtvqWSv2MRDDBqYk1 +4Km+kgtnd5ffPIVPtFjS1JqKZMLRPLXZxAqq7P2HtmjAl/7CiKIlSMUZRCBn+mR4zja Ni+D5IMHq+vEMRuAozcpp4p9C66XBKsRD1VKVOPNQIBDWCef2IGwVo6bWD3RbgW49pfC baFiT10fwTM/wBt9DVPyG9EY6X+F0GACaCcFLmv6UjL9H3DyOKo7KXNCUsfgNMRhRHbP IFrw== X-Gm-Message-State: ACgBeo284K44eoJSdpPgTJZ54Kzd7HnSNOUzLo8dMP+3+55dVgDNSwTR 9W46HFO8t56YOMb1wCj8ODGPbQ== X-Google-Smtp-Source: AA6agR75NLnh0FEwXwA71OEbUMCL2lUEwtoOwNyM6CP2+MC20LBiQKeC846IXaZpTvD7Ul9Zk2yZLQ== X-Received: by 2002:a17:90b:4a43:b0:202:7706:73d7 with SMTP id lb3-20020a17090b4a4300b00202770673d7mr16015103pjb.137.1662909156997; Sun, 11 Sep 2022 08:12:36 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id i29-20020aa796fd000000b00538056de6ecsm3464959pfq.52.2022.09.11.08.12.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 11 Sep 2022 08:12:36 -0700 (PDT) Date: Sun, 11 Sep 2022 08:12:35 -0700 From: Kees Cook To: Christian Brauner Cc: "Eric W. Biederman" , Andrei Vagin , Alexey Izbyshev , Florian Weimer , Dmitry Safonov <0x7f454c46@gmail.com>, linux-kernel@vger.kernel.org, linux-mm@kvack.org Subject: Re: Potentially undesirable interactions between vfork() and time namespaces Message-ID: <202209110810.F7352A26@keescook> References: <87czcfhsme.fsf@email.froward.int.ebiederm.org> <874jxkcfoa.fsf@email.froward.int.ebiederm.org> <20220908081003.sjuerd5wiyge4jos@wittgenstein> <87v8pxa51n.fsf@email.froward.int.ebiederm.org> <20220909075158.ed4linrpwwabxabl@wittgenstein> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20220909075158.ed4linrpwwabxabl@wittgenstein> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Sep 09, 2022 at 09:51:58AM +0200, Christian Brauner wrote: > As stated above the proposed exec behavior we currently clearly emulate > in userspace. So that part is fine. It's not clear to me yet what the right solution is from this thread so far... what's needed for v6.0 release (since we're quickly running out of release candidates)? -- Kees Cook