From mboxrd@z Thu Jan 1 00:00:00 1970 From: Konrad Rzeszutek Wilk Subject: Re: [PATCH] xsplice: Use ld-embedded build-ids Date: Tue, 15 Sep 2015 14:38:12 -0400 Message-ID: References: <55C20F57.8@amazon.com> <1438783749-6252-1-git-send-email-mpohlack@amazon.de> <55CA1EE802000078000999CE@prv-mh.provo.novell.com> <55CDE61A.3060502@amazon.com> <55CE0F49020000780009B127@prv-mh.provo.novell.com> <55CDF3E4.3060405@amazon.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Zbv7Q-0003ih-0D for xen-devel@lists.xenproject.org; Tue, 15 Sep 2015 18:38:16 +0000 Received: by oibi136 with SMTP id i136so9533825oib.3 for ; Tue, 15 Sep 2015 11:38:13 -0700 (PDT) In-Reply-To: <55CDF3E4.3060405@amazon.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Martin Pohlack Cc: elena.ufimtseva@oracle.com, Jeremy Fitzhardinge , hanweidong@huawei.com, Martin Pohlack , Jan Beulich , john.liuqiming@huawei.com, paul.voccio@rackspace.com, Daniel Kiper , major.hayden@rackspace.com, liuyingdong@huawei.com, aliguori@amazon.com, xiantao.zxt@alibaba-inc.com, steven.wilson@rackspace.com, peter.huangpeng@huawei.com, Matt Wilson , xen-devel@lists.xenproject.org, rick.harris@rackspace.com, josh.kearney@rackspace.com, jinsong.liu@alibaba-inc.com, amesserl@rackspace.com, dslutz@verizon.com, fanhenglong@huawei.com, Bjoern Doebel List-Id: xen-devel@lists.xenproject.org On Fri, Aug 14, 2015 at 9:57 AM, Martin Pohlack wrote: > On 14.08.2015 15:54, Jan Beulich wrote: >>>>> On 14.08.15 at 14:59, wrote: >>> On 11.08.2015 16:12, Jan Beulich wrote: >>>>>>> On 05.08.15 at 16:09, wrote: >>>>> Todo: >>>>> * Should be moved to sysctl to only allow Dom0 access >>>> >>>> Because of? >>> >>> The discussion in this thread: >>> >>> [Xen-devel] [RFC PATCH v3.1 2/2] xsplice: Add hook for build_id >>> >>> was: >>> ---------------------------------------------------------------------- >>>>> Martin Pohlack: >>>>> We should not expose the build_id to normal guests, but only to Dom0. >>>>> >>>>> A build_id uniquely identifies a specific build and I don't see how that >>>>> information would be required from DomU. It might actually help an >>>>> attacker to build his return-oriented programming exploit against a >>>>> specific build. >>>>> >>>>> The normal version numbers should be enough to know about capabilities >>>>> and API. >>>> >>>> Andrew Cooper: >>>> >>>> It will need its own XSM hook, but need not be strictly limited to just >>>> dom0. >>> ---------------------------------------------------------------------- >> >> So I'm confused - I asked "why Dom0 only" and then you point me to >> Andrew saying it doesn't need to be Dom0 only? > > Sorry about that, my (not expressed) thinking was that we should > restrict that to Dom0 for the XSM-disabled case. > That may make this more complex. If we want to restrict it to this we may as well just stick this in sysctl and have it be part of the xsplice ops. Let me do that.