Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp232692imu; Wed, 12 Dec 2018 15:43:26 -0800 (PST) X-Google-Smtp-Source: AFSGD/UR2HmVLblXQE6PXeuh7UCnhzv+bpplAhIdF6Vedz1bkpk70j79w8P1MLiH1Hm0TZeC1BBH X-Received: by 2002:a63:ea15:: with SMTP id c21mr18900513pgi.361.1544658206436; Wed, 12 Dec 2018 15:43:26 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1544658206; cv=none; d=google.com; s=arc-20160816; b=DMNUvQq1SF7PocOOg6cgeAJpjUtj/30ZHW3SL3x1FrXRLVsJhc1Tyeog8pXA1oU3Nd f6f/i/Xhu2cAbhBNpTxopqtg0EGCADZhCXWX2V6/UHlEI2ApmKawqJ7qvMwIRX5D3Axb /xI+TVgjW9QZK5i1Db+PAR706sw1kNpy9O0654qiWHHlTpEXWZ4WSKDhUvaX2B6VGukw rtGn4cYd17lbjCFCDHWqCpcjmU8oDw4MEK31iGKUDP3a4iLc2tPyeh2iD/YRk5iY1WUQ JmhRObQgZd4K4AMVWAx3TDoNwl8kw+SZDX/1TiSX3f9BM3Rh5pzmCnBvpHNiLoh7YLRV +c6Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date; bh=yFcsO7E9n5dhmC9vbSnE2Ka8GinILcCJAC+srBLL/DQ=; b=Yv82JslujyLnEqFjI8KNYiRwVjEMh2q0fLvuJrZxRPxE/Rx3rrVo0uuk6e8A+SbbmC 6Xr5qKWbApgQxmJMN2f8UEiOgpI8F+TU54LFyVUBXPdaWrf8lJnYG40LNcdA3HqyUdx7 Av4o9+ThxvX+w/z3Cs2SxbOCXo6Efoh0ykwZFZ082FZAu4Z+lNx8zxiqUSa1HZhSfxmq eGCZaCvGyhCkDIOoxgXTYNCzB4YL0K5yJd2zRnfLWTeYEMBerzrejAN3eCebdCV7/CaQ 0cq6EZs/GstaPnWFppKcG5BaQFmm8JctDQLISQWYQ6X5g93LEqzab8l2u1JL+QuYqKRE 5yOw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id g25si147455pgm.14.2018.12.12.15.43.11; Wed, 12 Dec 2018 15:43:26 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728512AbeLLXk7 (ORCPT + 99 others); Wed, 12 Dec 2018 18:40:59 -0500 Received: from namei.org ([65.99.196.166]:51466 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726214AbeLLXk7 (ORCPT ); Wed, 12 Dec 2018 18:40:59 -0500 Received: from localhost (localhost [127.0.0.1]) by namei.org (8.14.4/8.14.4) with ESMTP id wBCNeWxU007768; Wed, 12 Dec 2018 23:40:32 GMT Date: Thu, 13 Dec 2018 10:40:32 +1100 (AEDT) From: James Morris To: Florian Weimer cc: =?ISO-8859-15?Q?Micka=EBl_Sala=FCn?= , linux-kernel@vger.kernel.org, Al Viro , Jonathan Corbet , Kees Cook , Matthew Garrett , Michael Kerrisk , =?ISO-8859-15?Q?Micka=EBl_Sala=FCn?= , Mimi Zohar , =?ISO-8859-15?Q?Philippe_Tr=E9buchet?= , Shuah Khan , Thibaut Sautereau , Vincent Strubel , Yves-Alexis Perez , kernel-hardening@lists.openwall.com, linux-api@vger.kernel.org, linux-security-module@vger.kernel.org, linux-fsdevel@vger.kernel.org Subject: Re: [RFC PATCH v1 0/5] Add support for O_MAYEXEC In-Reply-To: <87lg4upkpv.fsf@oldenburg2.str.redhat.com> Message-ID: References: <20181212081712.32347-1-mic@digikod.net> <87lg4upkpv.fsf@oldenburg2.str.redhat.com> User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 12 Dec 2018, Florian Weimer wrote: > * James Morris: > > > If you're depending on the script interpreter to flag that the user may > > execute code, this seems to be equivalent in security terms to depending > > on the user. e.g. what if the user uses ptrace and clears O_MAYEXEC? > > The argument I've heard is this: Using ptrace (and adding the +x > attribute) are auditable events. I guess you could also preload a modified libc which strips the flag. -- James Morris