Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261186AbVAMH0Y (ORCPT ); Thu, 13 Jan 2005 02:26:24 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261188AbVAMH0Y (ORCPT ); Thu, 13 Jan 2005 02:26:24 -0500 Received: from waste.org ([216.27.176.166]:42120 "EHLO waste.org") by vger.kernel.org with ESMTP id S261186AbVAMH0V (ORCPT ); Thu, 13 Jan 2005 02:26:21 -0500 Date: Wed, 12 Jan 2005 23:25:58 -0800 From: Matt Mackall To: Andrew Morton Cc: William Lee Irwin III , davej@redhat.com, torvalds@osdl.org, marcelo.tosatti@cyclades.com, greg@kroah.com, chrisw@osdl.org, alan@lxorguk.ukuu.org.uk, linux-kernel@vger.kernel.org Subject: Re: thoughts on kernel security issues Message-ID: <20050113072558.GM2995@waste.org> References: <20050112161227.GF32024@logos.cnet> <20050112205350.GM24518@redhat.com> <20050112182838.2aa7eec2.akpm@osdl.org> <20050113033542.GC1212@redhat.com> <20050112194239.0a7b720b.akpm@osdl.org> <20050113044942.GI14443@holomorphy.com> <20050112225412.5957c5d7.akpm@osdl.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050112225412.5957c5d7.akpm@osdl.org> User-Agent: Mutt/1.3.28i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1087 Lines: 25 On Wed, Jan 12, 2005 at 10:54:12PM -0800, Andrew Morton wrote: > William Lee Irwin III wrote: > > > > Most of the local DoS's I'm aware of are memory management -related, > > i.e. user- triggerable proliferation of pinned kernel data structures. > > Well. A heck of a lot of the DoS opportunities we've historically seen > involved memory leaks, deadlocks or making the kernel go oops or BUG with > locks held or with kernel memory allocated. I think we can probably exclude root-only local DoS from the full embargo treatment for starters. The recent /dev/random sysctl one was in that category. I can imagine some local DoS bugs that are worth keeping a lid on for a bit. Classic F00F bug may have been a good example. But hole in an arbitrary driver may not. -- Mathematics is the supreme nostalgia of our time. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/