Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754500AbeAGSzU (ORCPT + 1 other); Sun, 7 Jan 2018 13:55:20 -0500 Received: from mail.skyhub.de ([5.9.137.197]:38146 "EHLO mail.skyhub.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754312AbeAGSzT (ORCPT ); Sun, 7 Jan 2018 13:55:19 -0500 Date: Sun, 7 Jan 2018 19:55:11 +0100 From: Borislav Petkov To: Willy Tarreau Cc: Dave Hansen , Thomas Gleixner , Jon Masters , "Woodhouse, David" , Paolo Bonzini , Alan Cox , Linus Torvalds , Andi Kleen , Greg Kroah-Hartman , Tim Chen , Linux Kernel Mailing List , Jeff Law , Nick Clifton Subject: Re: Avoid speculative indirect calls in kernel Message-ID: <20180107185511.3r73spn4ylxgmd4u@pd.tnic> References: <1515054014.12987.75.camel@amazon.co.uk> <403e65be-cfd1-fd08-0401-2e26470b63d4@redhat.com> <4dde456c-fd15-e768-8876-5844c8b7c455@redhat.com> <20180105064946.GA4007@1wt.eu> <44f1b753-47d3-82e3-9401-256b4beadd4f@intel.com> <20180105071333.GA4029@1wt.eu> <20180107141410.d6xd573s436ma5kz@pd.tnic> <20180107174451.GD9772@1wt.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20180107174451.GD9772@1wt.eu> User-Agent: NeoMutt/20170609 (1.8.3) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Return-Path: On Sun, Jan 07, 2018 at 06:44:51PM +0100, Willy Tarreau wrote: > Exactly, but there's much more to gain by owning this process anyway in > certain cases than just dumping a few hundreds of kernel bytes. A few hundred? It is *all* machine bytes. > That's where I consider that "trusted" is more "critical" than "safe" : > if it dies, we all die anyway. No, not die. Exploit it and since it is "trusted", use it to dump all memory. All your memories belongs to us. > Just like you have to trust your plane's pilot eventhough you don't > know him personally. Funny you should make that analogy. Remember that germanwings pilot? People trusted him too. Now imagine if the plane had protection against insane pilots... some of those people might still be alive, who knows... -- Regards/Gruss, Boris. Good mailing practices for 400: avoid top-posting and trim the reply.