Received: by 2002:a25:868d:0:0:0:0:0 with SMTP id z13csp642867ybk; Wed, 13 May 2020 09:14:18 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyzudBSnPhPpwbMp31CHRPIDoGFB8Y9JpAreyOakD28z+409INQfK9eIKRUgzSfa86bdJiY X-Received: by 2002:a05:6402:2d4:: with SMTP id b20mr416302edx.118.1589386457895; Wed, 13 May 2020 09:14:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1589386457; cv=none; d=google.com; s=arc-20160816; b=RUHnOnIiNE/ItOiI409VSfjnJSvaU3e1VxtXxMCcLiUCjSm1fhawp4srxLjkIfdvzT ayG8l8AU57JGqrUI9/w0Pu4t3C/TAC3vcUjGHTCQ5b8QWUQkJy9fqg2cb89gfQHoRwqA I9LREjPeBkCc6tlkv5NuFqXgpcqZziuKj52L3jgwZlb4CPvoczhzABOkK0m9GJqT7aNV nGaEA/CwaghGIOYx70Z3gaLFj/fdf7Jhf+DTI9AXnHie/fG5+jABW4l99sLBjO6STuRa AXwtYl8gCek7dUkDpKtYj9mv1kBeI8gH6aea+OuntHk9e+qXJrMAdqUvGFoa4Z7tBo3Y k09A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :dkim-signature; bh=hgbIbhwC6d+CmtQC6lVXHU9K26XG8CQqD4WJcPfeJ3o=; b=IMg8D0vg+6FOwAXRs0O/yr44ZVzZlG1vM3LYxr3w3C3LZlFSs7xTHXp9+fVxYQN35R mPIX0g0WoUYhAIlezYQATDX+/0HeFDE99Hgh1p29CKJ9/Dk0svYBez4U7C4yBlIfy4lR /QrUJDlcooXSl8ImFgiias0gsBLTz7qnzV7+7sLz0yowzsHFcABo3nzIhp3U5WbtQQEB ON65pgQfArdcOiES50U31QkHawsQwzp/LNug0bGuQxXyQOJk0BYCaLIWg1V6v1b5GdNK lSg+csXMJSz6/uVlQCzAbTnFFrg02OKdq8EggFqHoMvclyY3QARyny3L7D2iO/frVLJq ikRg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=jCsO6gbq; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id c22si17946edx.33.2020.05.13.09.13.54; Wed, 13 May 2020 09:14:17 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=jCsO6gbq; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2389453AbgEMQJj (ORCPT + 99 others); Wed, 13 May 2020 12:09:39 -0400 Received: from mail.kernel.org ([198.145.29.99]:59016 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1730657AbgEMQJj (ORCPT ); Wed, 13 May 2020 12:09:39 -0400 Received: from localhost (83-86-89-107.cable.dynamic.v4.ziggo.nl [83.86.89.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id AB670205CB; Wed, 13 May 2020 16:09:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1589386179; bh=WdqE4cKf0ccXinlbg1MvpbxgyN4LOmP75On1HjwnySE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=jCsO6gbqEaPkje+ceZ0NpYvOXh4pFINJxnLiCkUnjFcYlrkB/1tFYRbX/+8YCbglc RvqicPTHZwK14lZl9OdlxuC8F6HA4xisy00wtjjz5GKlPatRkgcBrlpI3oY8eMBOLK +2YqkwukULXM8ZIENDPPAlJaQwfu+wMaKaXJQhgI= Date: Wed, 13 May 2020 18:09:36 +0200 From: Greg KH To: "Eric W. Biederman" Cc: Luis Chamberlain , viro@zeniv.linux.org.uk, rafael@kernel.org, jeyu@kernel.org, jmorris@namei.org, keescook@chromium.org, paul@paul-moore.com, stephen.smalley.work@gmail.com, eparis@parisplace.org, nayna@linux.ibm.com, zohar@linux.ibm.com, scott.branden@broadcom.com, dan.carpenter@oracle.com, skhan@linuxfoundation.org, geert@linux-m68k.org, tglx@linutronix.de, bauerman@linux.ibm.com, dhowells@redhat.com, linux-integrity@vger.kernel.org, linux-fsdevel@vger.kernel.org, kexec@lists.infradead.org, linux-security-module@vger.kernel.org, selinux@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 2/3] security: add symbol namespace for reading file data Message-ID: <20200513160936.GC1362525@kroah.com> References: <20200513152108.25669-1-mcgrof@kernel.org> <20200513152108.25669-3-mcgrof@kernel.org> <87k11fonbk.fsf@x220.int.ebiederm.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87k11fonbk.fsf@x220.int.ebiederm.org> Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, May 13, 2020 at 10:40:31AM -0500, Eric W. Biederman wrote: > Luis Chamberlain writes: > > > Certain symbols are not meant to be used by everybody, the security > > helpers for reading files directly is one such case. Use a symbol > > namespace for them. > > > > This will prevent abuse of use of these symbols in places they were > > not inteded to be used, and provides an easy way to audit where these > > types of operations happen as a whole. > > Why not just remove the ability for the firmware loader to be a module? I agree, it's been a mess of build options to try to keep alive over time. > Is there some important use case that requires the firmware loader > to be a module? I don't think so anymore. > We already compile the code in by default. So it is probably just > easier to remove the modular support all together. Which would allow > the export of the security hooks to be removed as well. Agreed. thanks, greg k-h