Re: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode

From: Al Viro
Date: Fri May 12 2017 - 04:18:32 EST

Next message: Kalle Valo: "Re: [PATCH] brcmfmac: btcoex: replace init_timer with setup_timer"
Previous message: Boris Brezillon: "Re: [PATCH v2 5/7] drm/ltdc: Use the panel-bridge helper."
In reply to: Christoph Hellwig: "Re: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode"
Next in thread: Al Viro: "Re: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, May 12, 2017 at 01:11:26AM -0700, Christoph Hellwig wrote:

> But it won't help against exploits modifying addr_limit manually.

Or the ones setting current->cred to that of init. Your point being?

Next message: Kalle Valo: "Re: [PATCH] brcmfmac: btcoex: replace init_timer with setup_timer"
Previous message: Boris Brezillon: "Re: [PATCH v2 5/7] drm/ltdc: Use the panel-bridge helper."
In reply to: Christoph Hellwig: "Re: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode"
Next in thread: Al Viro: "Re: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]