From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 842A5C433EF for ; Mon, 22 Nov 2021 12:58:04 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238936AbhKVNBJ (ORCPT ); Mon, 22 Nov 2021 08:01:09 -0500 Received: from relay1-d.mail.gandi.net ([217.70.183.193]:33093 "EHLO relay1-d.mail.gandi.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231856AbhKVNBJ (ORCPT ); Mon, 22 Nov 2021 08:01:09 -0500 Received: (Authenticated sender: alex@ghiti.fr) by relay1-d.mail.gandi.net (Postfix) with ESMTPSA id F15E724001C; Mon, 22 Nov 2021 12:57:56 +0000 (UTC) Message-ID: Date: Mon, 22 Nov 2021 13:57:56 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.2.1 Subject: Re: [PATCH 6/8] mm: Allow arch specific arch_randomize_brk() with CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT Content-Language: en-US To: Christophe Leroy , Benjamin Herrenschmidt , Paul Mackerras , Michael Ellerman Cc: linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-mm@kvack.org References: <325663a5-d9a1-a8b8-7f16-c2985c319864@ghiti.fr> <2dd4a22e-f1a5-683c-2d17-ce726f03f4c5@csgroup.eu> From: Alexandre ghiti In-Reply-To: <2dd4a22e-f1a5-683c-2d17-ce726f03f4c5@csgroup.eu> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 11/22/21 12:47, Christophe Leroy wrote: > > > Le 22/11/2021 à 12:22, Alex Ghiti a écrit : >> Hi Christophe, >> >> Le 22/11/2021 à 09:48, Christophe Leroy a écrit : >>> Commit e7142bf5d231 ("arm64, mm: make randomization selected by >>> generic topdown mmap layout") introduced a default version of >>> arch_randomize_brk() provided when >>> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT is selected. >>> >>> powerpc could select CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT >>> but needs to provide its own arch_randomize_brk(). >>> >>> In order to allow that, don't make >>> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT select >>> CONFIG_ARCH_HAS_ELF_RANDOMIZE. Instead, ensure that >>> selecting CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT and >>> selecting CONFIG_ARCH_HAS_ELF_RANDOMIZE has the same effect. >> >> This feels weird to me since if CONFIG_ARCH_HAS_ELF_RANDOMIZE is used >> somewhere else at some point, it is not natural to add >> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT: can't we use a __weak >> function or a new CONFIG_ARCH_HAS_RANDOMIZE_BRK? > > > Yes I also found things a bit weird. > > CONFIG_ARCH_HAS_RANDOMIZE_BRK could be an idea but how different would > it be from CONFIG_ARCH_HAS_ELF_RANDOMIZE ? In fact I find it weird > that CONFIG_ARCH_HAS_ELF_RANDOMIZE is selected by > CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT and not by the arch itself. IIRC, this was a request from Kees Cook who wanted to enforce this security measure. > > On the other hand CONFIG_ARCH_HAS_ELF_RANDOMIZE also handles > arch_mmap_rnd() and here we are talking about arch_randomize_brk() only. > > In the begining I was thinking about adding a > CONFIG_ARCH_WANT_DEFAULT_RANDOMIZE_BRK, but it was meaning adding it > to the few other arches selecting > CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT. > > So I think I will go for the __weak function option. Ok, thanks. Alex > > Thanks > Christophe From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.ozlabs.org (lists.ozlabs.org [112.213.38.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 3A20BC433F5 for ; Mon, 22 Nov 2021 12:58:38 +0000 (UTC) Received: from boromir.ozlabs.org (localhost [IPv6:::1]) by lists.ozlabs.org (Postfix) with ESMTP id 4HyS4r1s5mz3c6N for ; Mon, 22 Nov 2021 23:58:36 +1100 (AEDT) Authentication-Results: lists.ozlabs.org; spf=none (no SPF record) smtp.mailfrom=ghiti.fr (client-ip=217.70.183.193; helo=relay1-d.mail.gandi.net; envelope-from=alex@ghiti.fr; receiver=) X-Greylist: delayed 5712 seconds by postgrey-1.36 at boromir; Mon, 22 Nov 2021 23:58:08 AEDT Received: from relay1-d.mail.gandi.net (relay1-d.mail.gandi.net [217.70.183.193]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4HyS4J232cz2xt7 for ; Mon, 22 Nov 2021 23:58:06 +1100 (AEDT) Received: (Authenticated sender: alex@ghiti.fr) by relay1-d.mail.gandi.net (Postfix) with ESMTPSA id F15E724001C; Mon, 22 Nov 2021 12:57:56 +0000 (UTC) Message-ID: Date: Mon, 22 Nov 2021 13:57:56 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.2.1 Subject: Re: [PATCH 6/8] mm: Allow arch specific arch_randomize_brk() with CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT Content-Language: en-US To: Christophe Leroy , Benjamin Herrenschmidt , Paul Mackerras , Michael Ellerman References: <325663a5-d9a1-a8b8-7f16-c2985c319864@ghiti.fr> <2dd4a22e-f1a5-683c-2d17-ce726f03f4c5@csgroup.eu> From: Alexandre ghiti In-Reply-To: <2dd4a22e-f1a5-683c-2d17-ce726f03f4c5@csgroup.eu> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: linuxppc-dev@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux on PowerPC Developers Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: linux-mm@kvack.org, linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org Errors-To: linuxppc-dev-bounces+linuxppc-dev=archiver.kernel.org@lists.ozlabs.org Sender: "Linuxppc-dev" On 11/22/21 12:47, Christophe Leroy wrote: > > > Le 22/11/2021 à 12:22, Alex Ghiti a écrit : >> Hi Christophe, >> >> Le 22/11/2021 à 09:48, Christophe Leroy a écrit : >>> Commit e7142bf5d231 ("arm64, mm: make randomization selected by >>> generic topdown mmap layout") introduced a default version of >>> arch_randomize_brk() provided when >>> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT is selected. >>> >>> powerpc could select CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT >>> but needs to provide its own arch_randomize_brk(). >>> >>> In order to allow that, don't make >>> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT select >>> CONFIG_ARCH_HAS_ELF_RANDOMIZE. Instead, ensure that >>> selecting CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT and >>> selecting CONFIG_ARCH_HAS_ELF_RANDOMIZE has the same effect. >> >> This feels weird to me since if CONFIG_ARCH_HAS_ELF_RANDOMIZE is used >> somewhere else at some point, it is not natural to add >> CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT: can't we use a __weak >> function or a new CONFIG_ARCH_HAS_RANDOMIZE_BRK? > > > Yes I also found things a bit weird. > > CONFIG_ARCH_HAS_RANDOMIZE_BRK could be an idea but how different would > it be from CONFIG_ARCH_HAS_ELF_RANDOMIZE ? In fact I find it weird > that CONFIG_ARCH_HAS_ELF_RANDOMIZE is selected by > CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT and not by the arch itself. IIRC, this was a request from Kees Cook who wanted to enforce this security measure. > > On the other hand CONFIG_ARCH_HAS_ELF_RANDOMIZE also handles > arch_mmap_rnd() and here we are talking about arch_randomize_brk() only. > > In the begining I was thinking about adding a > CONFIG_ARCH_WANT_DEFAULT_RANDOMIZE_BRK, but it was meaning adding it > to the few other arches selecting > CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT. > > So I think I will go for the __weak function option. Ok, thanks. Alex > > Thanks > Christophe