From: Miroslav Benes <mbenes@suse.cz>
To: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Jessica Yu <jeyu@redhat.com>, Jiri Kosina <jikos@kernel.org>,
Petr Mladek <pmladek@suse.com>,
linux-kernel@vger.kernel.org, live-patching@vger.kernel.org,
Chunyu Hu <chuhu@redhat.com>,
Rusty Russell <rusty@rustcorp.com.au>
Subject: Re: [PATCH] livepatch/module: make TAINT_LIVEPATCH module-specific
Date: Thu, 25 Aug 2016 16:47:05 +0200 (CEST) [thread overview]
Message-ID: <alpine.LNX.2.00.1608251646400.11328@pobox.suse.cz> (raw)
In-Reply-To: <20160825144227.ak4u4vkamcomxd7p@treble>
On Thu, 25 Aug 2016, Josh Poimboeuf wrote:
> On Thu, Aug 25, 2016 at 04:25:15PM +0200, Miroslav Benes wrote:
> > On Wed, 24 Aug 2016, Josh Poimboeuf wrote:
> >
> > > There's no reliable way to determine which module tainted the kernel
> > > with CONFIG_LIVEPATCH. For example, /sys/module/<klp module>/taint
> > > doesn't report it. Neither does the "mod -t" command in the crash tool.
> > >
> > > Make it crystal clear who the guilty party is by converting
> > > CONFIG_LIVEPATCH to a module taint flag.
> > >
> > > This changes the behavior a bit: now the the flag gets set when the
> > > module is loaded, rather than when it's enabled.
> > >
> > > Reviewed-by: Chunyu Hu <chuhu@redhat.com>
> > > Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com>
> > > ---
> > > kernel/livepatch/core.c | 3 ---
> > > kernel/module.c | 35 ++++++++++++-----------------------
> > > 2 files changed, 12 insertions(+), 26 deletions(-)
> > >
> > > diff --git a/kernel/livepatch/core.c b/kernel/livepatch/core.c
> > > index 5fbabe0..af46438 100644
> > > --- a/kernel/livepatch/core.c
> > > +++ b/kernel/livepatch/core.c
> > > @@ -545,9 +545,6 @@ static int __klp_enable_patch(struct klp_patch *patch)
> > > list_prev_entry(patch, list)->state == KLP_DISABLED)
> > > return -EBUSY;
> > >
> > > - pr_notice_once("tainting kernel with TAINT_LIVEPATCH\n");
> > > - add_taint(TAINT_LIVEPATCH, LOCKDEP_STILL_OK);
> > > -
> > > pr_notice("enabling patch '%s'\n", patch->mod->name);
> > >
> > > klp_for_each_object(patch, obj) {
> > > diff --git a/kernel/module.c b/kernel/module.c
> > > index 529efae..fd5f95b 100644
> > > --- a/kernel/module.c
> > > +++ b/kernel/module.c
> > > @@ -1149,6 +1149,8 @@ static size_t module_flags_taint(struct module *mod, char *buf)
> > > buf[l++] = 'C';
> > > if (mod->taints & (1 << TAINT_UNSIGNED_MODULE))
> > > buf[l++] = 'E';
> > > + if (mod->taints & (1 << TAINT_LIVEPATCH))
> > > + buf[l++] = 'K';
> > > /*
> > > * TAINT_FORCED_RMMOD: could be added.
> > > * TAINT_CPU_OUT_OF_SPEC, TAINT_MACHINE_CHECK, TAINT_BAD_PAGE don't
> > > @@ -2791,26 +2793,6 @@ static int copy_chunked_from_user(void *dst, const void __user *usrc, unsigned l
> > > return 0;
> > > }
> > >
> > > -#ifdef CONFIG_LIVEPATCH
> > > -static int find_livepatch_modinfo(struct module *mod, struct load_info *info)
> > > -{
> > > - mod->klp = get_modinfo(info, "livepatch") ? true : false;
> > > -
> > > - return 0;
> > > -}
> > > -#else /* !CONFIG_LIVEPATCH */
> > > -static int find_livepatch_modinfo(struct module *mod, struct load_info *info)
> > > -{
> > > - if (get_modinfo(info, "livepatch")) {
> > > - pr_err("%s: module is marked as livepatch module, but livepatch support is disabled",
> > > - mod->name);
> > > - return -ENOEXEC;
> > > - }
> > > -
> > > - return 0;
> > > -}
> > > -#endif /* CONFIG_LIVEPATCH */
> > > -
> > > /* Sets info->hdr and info->len. */
> > > static int copy_module_from_user(const void __user *umod, unsigned long len,
> > > struct load_info *info)
> > > @@ -2969,9 +2951,16 @@ static int check_modinfo(struct module *mod, struct load_info *info, int flags)
> > > "is unknown, you have been warned.\n", mod->name);
> > > }
> > >
> > > - err = find_livepatch_modinfo(mod, info);
> > > - if (err)
> > > - return err;
> > > + if (get_modinfo(info, "livepatch")) {
> > > + if (!IS_ENABLED(CONFIG_LIVEPATCH)) {
> > > + pr_err("%s: module is marked as livepatch module, but livepatch support is disabled\n",
> > > + mod->name);
> > > + return -ENOEXEC;
> > > + }
> > > + mod->klp = true;
> > > + pr_warn("%s: loading livepatch module.\n", mod->name);
> > > + add_taint_module(mod, TAINT_LIVEPATCH, LOCKDEP_STILL_OK);
> > > + }
> >
> > The old code set mod->klp to false if get_modinfo(info, "livepatch"))
> > returned true. I think that we don't have to do it, because struct module
> > of a module is statically allocated (if I am not mistaken) and hence
> > mod->klp should be initialized to false. However maybe it'd better to do
> > it explicitly. What do you think?
>
> Rusty confirmed before that the module struct is initialized to zero:
>
> https://lkml.kernel.org/r/87mw3jxdea.fsf@rustcorp.com.au
>
> And I suspect a lot of module code relies on that fact. For example,
> see mod->async_probe_requested. So my preference would be to follow
> what seems to be the current convention in the code, and not explicitly
> initialize it to false.
Ah, right. Ok then.
Miroslav
prev parent reply other threads:[~2016-08-25 14:47 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-08-24 21:33 [PATCH] livepatch/module: make TAINT_LIVEPATCH module-specific Josh Poimboeuf
2016-08-24 21:43 ` Josh Poimboeuf
2016-08-25 0:54 ` Jiri Kosina
2016-08-25 4:14 ` Rusty Russell
2016-08-25 2:53 ` Jessica Yu
2016-08-25 3:23 ` [PATCH] " Josh Poimboeuf
2016-08-25 6:40 ` kbuild test robot
2016-08-25 7:46 ` Petr Mladek
2016-08-25 12:31 ` Josh Poimboeuf
2016-08-25 14:25 ` Miroslav Benes
2016-08-25 14:42 ` Josh Poimboeuf
2016-08-25 14:47 ` Miroslav Benes [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=alpine.LNX.2.00.1608251646400.11328@pobox.suse.cz \
--to=mbenes@suse.cz \
--cc=chuhu@redhat.com \
--cc=jeyu@redhat.com \
--cc=jikos@kernel.org \
--cc=jpoimboe@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=live-patching@vger.kernel.org \
--cc=pmladek@suse.com \
--cc=rusty@rustcorp.com.au \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).