Re: [PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-10-23 Thread Andrea Arcangeli
Hello, On Thu, Oct 08, 2020 at 04:22:36PM -0700, Nick Kralevich wrote: > I haven't tried to verify this myself. I wonder if the usermode > hardening changes also impacted this exploit? See > https://lkml.org/lkml/2017/1/16/468 My plan was to: 1) reproduce with the old buggy kernel 2) forward po

Re: [PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-10-22 Thread Lokesh Gidra
On Thu, Oct 8, 2020 at 4:22 PM Nick Kralevich wrote: > > On Wed, Oct 7, 2020 at 9:01 PM Andrea Arcangeli wrote: > > > > Hello Lokesh, > > > > On Wed, Oct 07, 2020 at 01:26:55PM -0700, Lokesh Gidra wrote: > > > On Wed, Sep 23, 2020 at 11:56 PM Lokesh Gidra > > > wrote: > > > > > > > > This patch

Re: [PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-10-08 Thread Nick Kralevich
On Wed, Oct 7, 2020 at 9:01 PM Andrea Arcangeli wrote: > > Hello Lokesh, > > On Wed, Oct 07, 2020 at 01:26:55PM -0700, Lokesh Gidra wrote: > > On Wed, Sep 23, 2020 at 11:56 PM Lokesh Gidra > > wrote: > > > > > > This patch series is split from [1]. The other series enables SELinux > > > support

Re: [PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-10-07 Thread Andrea Arcangeli
Hello Lokesh, On Wed, Oct 07, 2020 at 01:26:55PM -0700, Lokesh Gidra wrote: > On Wed, Sep 23, 2020 at 11:56 PM Lokesh Gidra wrote: > > > > This patch series is split from [1]. The other series enables SELinux > > support for userfaultfd file descriptors so that its creation and > > movement can b

Re: [PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-10-07 Thread Lokesh Gidra
On Wed, Sep 23, 2020 at 11:56 PM Lokesh Gidra wrote: > > This patch series is split from [1]. The other series enables SELinux > support for userfaultfd file descriptors so that its creation and > movement can be controlled. > > It has been demonstrated on various occasions that suspending kernel

[PATCH v4 0/2] Control over userfaultfd kernel-fault handling

2020-09-23 Thread Lokesh Gidra
This patch series is split from [1]. The other series enables SELinux support for userfaultfd file descriptors so that its creation and movement can be controlled. It has been demonstrated on various occasions that suspending kernel code execution for an arbitrary amount of time at any access to u