Re: [PATCH 1/2] LSM: Do not apply mmap_min_addr check to PROT_NONE

[Gregory Sahanovitch]

On Fri, Oct 28, 2011 at 6:37 PM, Roland McGrath <roland@xxxxxxxxxxxxx> wrote:
>> Since mmap_min_addr is used to prevent a *malicious* process from maping the
>> zero page and then taking advantage of a user-pointer dereference in the
>> *kernel code*, I do not see what you gain by guaranteeing that the
>> application *that you control* would never exploit such a vulnerability?
>
> The application does sandboxing of untrusted code.
>

Makes sense, thanks.

Out of curiosity, what kind of sandbox exactly? I'm guessing you need
to prevent many other operations, e.g., by intercepting some system
calls. In that case, you could also ensure that such an mmap never
occurs...

-- 
- Greg
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/