Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp327796ybt; Mon, 6 Jul 2020 10:16:22 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzxCD3RuP0UaATtfGNrf/rpXwWqqLOWgfjQGCN4taV8NFyp0F0dJ8UhXZvJk/kgd34DDN27 X-Received: by 2002:a50:ab53:: with SMTP id t19mr57888230edc.179.1594055782583; Mon, 06 Jul 2020 10:16:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594055782; cv=none; d=google.com; s=arc-20160816; b=SsE8Rl0X4FlqAHugWayhtBp5bKHloyirWIvVD4DI6XHY/uDX4DiVBGwvaALoTWBr4w npWwAvrN5mOsH9TCwUEG9DKYHbqDikib9nFbi5UWVZ3l8pAL57UhpkSko1VIAD6Sx+kR jdv+l4Xx0m6/FDSa/Lbi4AtcIKa+4emevYLtxiAQJ4f2qWGmZa6k2EuRIxCgk1roz9VA xP6ovh6IIRVxXqUcipJeOMk5lTOWkxY+W3bbK8P9nSs+zrovLfKqT/V4B2ce9ENpqDX3 7GMcmkl/cBf//1EE8q3ZaOuB1yiCe9oIdiEhGcPWhrgxzUZ1HFS5r9jvTeR44sURXNZb /SvQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:content-transfer-encoding :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from; bh=t7/5JhO196v6cPQ1P7lXRrik2gR+pZ2L/OjWTNWBcsI=; b=JFMWBXpk3lFiUN3eo5ZovLpYTcN42X5+gNwXV29DJpxasicDP7KJkmPZyQlePXOP/s 3iMNUON8O31WN6c7S5LjkLmtZ9VBwR0s+Ew0GcrbNIGKoQRpG8dEeIML/4RuKP/q7Ti9 rxW7TGL1tB4R1YG9KEzPKiBf6JSN99vGLMceY1res4CRVJ1D81FbilOhXU0nQdpg8wLW 7PdnvVRNFeWhRFMRdywaNuNhH4dxrzUaqirK9ZFa9wIgPHUzzG7svHQJ0ORi9Qggl0Me cg0LkDHEolj2xWeC8r8K7CanBzJeQwFl6TuTchQW1dZp/EnmY6vedLonTza75HDjtZN0 DQ9g== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dh7si12787732edb.531.2020.07.06.10.16.00; Mon, 06 Jul 2020 10:16:22 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729642AbgGFRNh (ORCPT + 99 others); Mon, 6 Jul 2020 13:13:37 -0400 Received: from mxo1.nje.dmz.twosigma.com ([208.77.214.160]:45967 "EHLO mxo1.nje.dmz.twosigma.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729478AbgGFRNh (ORCPT ); Mon, 6 Jul 2020 13:13:37 -0400 Received: from localhost (localhost [127.0.0.1]) by mxo1.nje.dmz.twosigma.com (Postfix) with ESMTP id 4B0sbh0618z7t8v; Mon, 6 Jul 2020 17:13:36 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at twosigma.com Received: from mxo1.nje.dmz.twosigma.com ([127.0.0.1]) by localhost (mxo1.nje.dmz.twosigma.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZ-uHme1hea8; Mon, 6 Jul 2020 17:13:35 +0000 (UTC) Received: from exmbdft8.ad.twosigma.com (exmbdft8.ad.twosigma.com [172.22.2.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mxo1.nje.dmz.twosigma.com (Postfix) with ESMTPS id 4B0sbg6bfhz3wZ6; Mon, 6 Jul 2020 17:13:35 +0000 (UTC) Received: from EXMBDFT11.ad.twosigma.com (172.23.162.14) by exmbdft8.ad.twosigma.com (172.22.2.84) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 6 Jul 2020 17:13:35 +0000 Received: from EXMBDFT11.ad.twosigma.com ([fe80::8d66:2326:5416:86a9]) by EXMBDFT11.ad.twosigma.com ([fe80::8d66:2326:5416:86a9%19]) with mapi id 15.00.1497.000; Mon, 6 Jul 2020 17:13:35 +0000 From: Nicolas Viennot To: Paul Moore , "Serge E. Hallyn" , Christian Brauner CC: Adrian Reber , Eric Biederman , Pavel Emelyanov , Oleg Nesterov , "Dmitry Safonov" <0x7f454c46@gmail.com>, Andrei Vagin , =?utf-8?B?TWljaGHFgiBDxYJhcGnFhHNraQ==?= , "Kamil Yurtsever" , Dirk Petersen , Christine Flood , Casey Schaufler , Mike Rapoport , Radostin Stoyanov , Cyrill Gorcunov , Stephen Smalley , Sargun Dhillon , "Arnd Bergmann" , "linux-security-module@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "selinux@vger.kernel.org" , Eric Paris , Jann Horn , "linux-fsdevel@vger.kernel.org" Subject: RE: [PATCH v4 3/3] prctl: Allow ptrace capable processes to change /proc/self/exe Thread-Topic: [PATCH v4 3/3] prctl: Allow ptrace capable processes to change /proc/self/exe Thread-Index: AQHWT3Pec4M4ip1q2kWWALZu7qCiaaj0zUiAgAAMHwCABfYCYA== Date: Mon, 6 Jul 2020 17:13:35 +0000 Message-ID: References: <20200701064906.323185-1-areber@redhat.com> <20200701064906.323185-4-areber@redhat.com> <20200702211647.GB3283@mail.hallyn.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.20.189.128] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org PiA+IFRoaXMgaXMgc2NhcnkuICBCdXQgSSBiZWxpZXZlIGl0IGlzIHNhZmUuDQo+ID4NCj4gPiBS ZXZpZXdlZC1ieTogU2VyZ2UgSGFsbHluIDxzZXJnZUBoYWxseW4uY29tPg0KPiA+DQo+ID4gSSBh bSBhIGJpdCBjdXJpb3VzIGFib3V0IHRoZSBpbXBsaWNhdGlvbnMgb2YgdGhlIHNlbGludXggcGF0 Y2guDQo+ID4gSUlVQyB5b3UgYXJlIHVzaW5nIHRoZSBwZXJtaXNzaW9uIG9mIHRoZSB0cmFjaW5n IHByb2Nlc3MgdG8gZXhlY3V0ZQ0KPiA+IHRoZSBmaWxlIHdpdGhvdXQgdHJhbnNpdGlvbiwgc28g dGhpcyBpcyBhIHdheSB0byB3b3JrIGFyb3VuZCB0aGUNCj4gPiBwb2xpY3kgd2hpY2ggbWlnaHQg cHJldmVudCB0aGUgdHJhY2VlIGZyb20gZG9pbmcgc28uDQo+ID4gR2l2ZW4gdGhhdCBTRUxpbnV4 IHdhbnRzIHRvIGJlIE1BQywgSSdtIG5vdCAqcXVpdGUqIHN1cmUgdGhhdCdzDQo+ID4gY29uc2lk ZXJlZCBrb3NoZXIuICBZb3UgYWxzbyBhcmUgc2tpcHBpbmcgdGhlIFBST0NFU1NfX1BUUkFDRSB0 bw0KPiA+IFNFQ0NMQVNTX1BST0NFU1MgY2hlY2sgd2hpY2ggc2VsaW51eF9icHJtX3NldF9jcmVk cyBkb2VzIGxhdGVyIG9uLg0KPiA+IEFnYWluIEknbSBqdXN0IG5vdCBxdWl0ZSBzdXJlIHdoYXQn cyBjb25zaWRlcmVkIG5vcm1hbCB0aGVyZSB0aGVzZQ0KPiA+IGRheXMuDQo+ID4NCj4gPiBQYXVs LCBkbyB5b3UgaGF2ZSBpbnB1dCB0aGVyZT8NCj4NCj4gSSBhZ3JlZSwgdGhlIFNFTGludXggaG9v ayBsb29rcyB3cm9uZy4gIEJ1aWxkaW5nIG9uIHdoYXQgQ2hyaXN0aWFuIHNhaWQsIHRoaXMgbG9v a3MgbW9yZSBsaWtlIGEgcHRyYWNlIG9wZXJhdGlvbiB0aGFuIGFuIGV4ZWMgb3BlcmF0aW9uLg0K DQpTZXJnZSwgUGF1bCwgQ2hyaXN0aWFuLA0KDQpJIG1hZGUgYSBQb0MgdG8gZGVtb25zdHJhdGUg dGhlIGNoYW5nZSBvZiAvcHJvYy9zZWxmL2V4ZSB3aXRob3V0IENBUF9TWVNfQURNSU4gdXNpbmcg b25seSBwdHJhY2UgYW5kIGV4ZWN2ZS4NCllvdSBtYXkgZmluZCBpdCBoZXJlOiBodHRwczovL2dp dGh1Yi5jb20vbnZpZW5ub3QvcnVuX2FzX2V4ZQ0KDQpXaGF0IGRvIHlvdSByZWNvbW1lbmQgdG8g cmVsYXggdGhlIHNlY3VyaXR5IGNoZWNrcyBpbiB0aGUga2VybmVsIHdoZW4gaXQgY29tZXMgdG8g Y2hhbmdpbmcgdGhlIGV4ZSBsaW5rPw0KDQogICAgTmljbw0K