Received: by 2002:ac0:a5b6:0:0:0:0:0 with SMTP id m51-v6csp2755504imm; Sun, 10 Jun 2018 00:41:56 -0700 (PDT) X-Google-Smtp-Source: ADUXVKIUUhaA2vtjpbz7k4GZ4TJyzNlRBRMg4hgI3LX1Hl4uMDOf+/G7AGgu1IKgfd7JaSBZmnv4 X-Received: by 2002:a65:62d9:: with SMTP id m25-v6mr10655712pgv.371.1528616516182; Sun, 10 Jun 2018 00:41:56 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1528616516; cv=none; d=google.com; s=arc-20160816; b=Yclba43aUBk5++cu/bRr5gZCIlFutWWPwMTYexbeKb4PjxDB5uP+eL/bqOr/vSzjC0 bmbsO7MrtdPC8BoD413k9NG2K/Vq+g+qu5KSWwMWMBV9WQuXajpy6eY2bqWkBKyPNWp5 e6lQIZfbYy1QSFl+WuQkCgjuWUlcbh9uAqIeT+LjREnYu6rAcpPC71q84kdjbRjjKhM/ /RttGHPXApNPoZZUvw+I6gOjbYsC8zRiWdVg6TjxhPEdL5zfa9CLn7WvUa5nh+O+EKA7 z0pIZ0StN6iwH+rQXzkPWLSc2r0WtevYWV6JC+GZ4ahcnj8C9uAK/Pxu2Jc/p8TDuQzv 6sBQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature :arc-authentication-results; bh=LYdEpi30ftsqOsMFpOx/lypTOIevXtyH+Nlj0s334xs=; b=A5NgRwJKlp6RmpYrlaQSxChPEnQsH5/aP2qLfYRNVDffSXCS5WB1fagMLI82XUoiPN FUTJtfkBFK2LuDU+iqFjatXZnD6iOJa1ATRwZbouBuovCLLX5MDgAxWdEWQOrCU/jyO7 lKFb2diRk+QG71mPpwXRsFBIjrQKpmSczl0FtmBG38DVeMjlVQJcd4FBpi2ts2u3Kaye LLTqMjBz/UxbHprTDpGi0hostyFyylmKOdlvPDg77VhRELe3R2h3Dcil/maHlXpnTlYP ZMBYn96hJduMueoRC+RffX5T+s2FVbKLXdvaulSTIG2gUa4Ut7OAA3DBdsKsHk1ze+X1 IpOA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=fjY7p8G5; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id y27-v6si8178163pfa.181.2018.06.10.00.41.41; Sun, 10 Jun 2018 00:41:56 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=fjY7p8G5; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932306AbeFJHlQ (ORCPT + 99 others); Sun, 10 Jun 2018 03:41:16 -0400 Received: from mail-ua0-f193.google.com ([209.85.217.193]:46586 "EHLO mail-ua0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932219AbeFJHlO (ORCPT ); Sun, 10 Jun 2018 03:41:14 -0400 Received: by mail-ua0-f193.google.com with SMTP id e8-v6so11546700uam.13; Sun, 10 Jun 2018 00:41:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=LYdEpi30ftsqOsMFpOx/lypTOIevXtyH+Nlj0s334xs=; b=fjY7p8G5hlXZElMufyMhuqjj6JkyyzAWlTCxxOPRheIsncV0LQjIOobMS0fQsJjZVi KBMffL3S+iBMyIPVoCf3dDUe8M8sNTqvPqzGLjmZ9Z01XaALB8aoTdPE9HTpN5mxL2CS DSxYgn0LCRocUo+0H0T2mhFeLRMyHNxhxwQ18/JexImZ1r+lDLjZ8VjPb/uwq73Kr6DI z+JdsZeoCF6Xh52ll7qvdF6fQwHM23TJNhtGXQlGC+igsY0n4kC4mFx8KFuYFN3fsjoC sewLHhLtu101veeRSukdnFYgG/2+rKtYNj7RwOZc2OmSvvwnmMb5NX9xxDh0UDgn3Nrp 7ZEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=LYdEpi30ftsqOsMFpOx/lypTOIevXtyH+Nlj0s334xs=; b=eeYMBSKpNPa+/HCw/jH490eodP/5gS8PRkvXNAkPAzA/JQVoC9xQfn2kXVDJx/ccCJ 3v0wjy9FwtuEsIQKQtFbMcqpfpvmsvC5Ph+jl61DaMZPOPYdgJOK8s068HXuGXi3ZbaI iO2YQSmY4H785JGPF9AISEt/gxsboOFrE2qqCCZ96GoJji2v1tmnxu3b0dwEGWzuWa46 lMboylAriL/9f5P1Tut/jKUpMmAIT4W4NZyXfTEaOAc+GmnRwQiayHvE42e1plY8Ek/p UA1ukJ6cYiA8YAP8xZkshucMthgBVfwOS4J8q6JFq4CaXGI26DdDv0EkWy2w9mII5NnS u9jQ== X-Gm-Message-State: APt69E3VkYPa5C2Am5mSo0cCFIGmFpDoT8kArCEqsu2xwEg6KbPCt+rj On6cN2a460LguVHRKYV4547K4UJDi80DIdGlqNc= X-Received: by 2002:ab0:987:: with SMTP id x7-v6mr8408650uag.131.1528616473703; Sun, 10 Jun 2018 00:41:13 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a67:7c88:0:0:0:0:0 with HTTP; Sun, 10 Jun 2018 00:40:53 -0700 (PDT) In-Reply-To: References: <1527346246-1334-1-git-send-email-s.mesoraca16@gmail.com> From: Salvatore Mesoraca Date: Sun, 10 Jun 2018 09:40:53 +0200 Message-ID: Subject: Re: [PATCH] proc: prevent a task from writing on its own /proc/*/mem To: Steve Kemp Cc: Kernel Hardening , LSM List , Linux Kernel Mailing List Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org 2018-06-04 18:57 GMT+02:00 Steve Kemp : >> A configurable LSM is probably the right way to do this. > > I wonder how many out of tree LSM there are? Looking at the mainline > kernel the only "small" LSM bundled is YAMA, and it seems that most of > the patches proposing new ones eventually die out. > > I appreciate that there are probably a lot of "toy" or "local" modules > out there for specific fields, companies, or products, but it does > seem odd that there are so few discussed publicly. > > (The last two I remember were S.A.R.A and something relating to > xattr-attributes being used to whitelist execution.) FWIW S.A.R.A. is not dead [1]. Unfortunately it needs infrastructure managed security blobs, so I didn't tried to get it upstream, yet. Of course, I can't give you any guarantees about when or if it will be upstreamed, but it's definitely still alive. [1] https://github.com/smeso/sara/releases/latest