Received: by 2002:a25:e74b:0:0:0:0:0 with SMTP id e72csp550914ybh; Wed, 15 Jul 2020 08:53:48 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyu9d3JztefgHPRm2YXACQ0cEw/14lNjMGCs+Uiw95BkRXWKLsjXBoakeilIzXWN4tGGzeB X-Received: by 2002:a50:ee01:: with SMTP id g1mr253780eds.264.1594828428631; Wed, 15 Jul 2020 08:53:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594828428; cv=none; d=google.com; s=arc-20160816; b=xjvUqszMmEFlL5CGMm6uZ+aHQy6cY/A+Zdh85dd4xmQ628ml+RdBCYVh1bB9SbmkT8 D7YzqLEgG8ZusLroyF2diLPqgWXH9AO9aylZjARAsjmjraEJ+XlSM1xlztFWDejQK514 EO9Yh8b/DL/lXWfb1Z7KdXa2UNb3+3UFhuYvTufs9NA1GiUM5w0lqopXVgxB5R9krq3X ba2HJtZflizmskCmJYVo7jow1csnXauaftVOhmfNLLkO5okj1vppTB2dAW6/sEz+ZCuv b8qD+ZzmgHWJumxqR3zVLzmVGve7EErXUOlvjr5Kdms5jIZUJ03eahFOcBruSig2rH1z TUkw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:content-transfer-encoding :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from; bh=Gx0UH/5zTzKYpBIq8mUip9yTk5azIa3gO7l12uQ2TQ8=; b=U/QH5Zh8adbVmDHANxKV4aK/1gc3X9nMys60kIhye+3MhbrfXXyWJg7iQ4JLxjF4Hv /xQfIrZ08YknKddk32gC5mIqqYr1Dqpl2V2EPrM7HooRjTbFg2Igqw7mWupj+PfFNzKX b57XmXQijZcxPY9PO0ac08fuH6QZK41U2vHGFCKf2hjugQj1qdFpIKgGgHxkYtQrObu2 YA+IyOtV6PgmaKAp+7TGZCse5b3VqQ0X6gLe/gDAhuYyq67jbANOrlHgdfC/xXO8ATIs bvh6/dzZh5LeuhNgRAaDybkSiI2PN0DafGy0t5XNF+DIO4I4L2dwaNSu/oFQgEenheZK R8iw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id i10si1361319ejf.146.2020.07.15.08.53.25; Wed, 15 Jul 2020 08:53:48 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727950AbgGOPuA (ORCPT + 99 others); Wed, 15 Jul 2020 11:50:00 -0400 Received: from mxo1.nje.dmz.twosigma.com ([208.77.214.160]:33369 "EHLO mxo1.nje.dmz.twosigma.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725835AbgGOPt7 (ORCPT ); Wed, 15 Jul 2020 11:49:59 -0400 Received: from localhost (localhost [127.0.0.1]) by mxo1.nje.dmz.twosigma.com (Postfix) with ESMTP id 4B6MK15sZ8z8snW; Wed, 15 Jul 2020 15:49:57 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at twosigma.com Received: from mxo1.nje.dmz.twosigma.com ([127.0.0.1]) by localhost (mxo1.nje.dmz.twosigma.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oLC619_nSHwc; Wed, 15 Jul 2020 15:49:57 +0000 (UTC) Received: from exmbdft6.ad.twosigma.com (exmbdft6.ad.twosigma.com [172.22.1.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mxo1.nje.dmz.twosigma.com (Postfix) with ESMTPS id 4B6MK15CHXz8snK; Wed, 15 Jul 2020 15:49:57 +0000 (UTC) Received: from EXMBDFT10.ad.twosigma.com (172.23.127.159) by exmbdft6.ad.twosigma.com (172.22.1.5) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 15 Jul 2020 15:49:57 +0000 Received: from EXMBDFT11.ad.twosigma.com (172.23.162.14) by EXMBDFT10.ad.twosigma.com (172.23.127.159) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 15 Jul 2020 15:49:57 +0000 Received: from EXMBDFT11.ad.twosigma.com ([fe80::8d66:2326:5416:86a9]) by EXMBDFT11.ad.twosigma.com ([fe80::8d66:2326:5416:86a9%19]) with mapi id 15.00.1497.000; Wed, 15 Jul 2020 15:49:57 +0000 From: Nicolas Viennot To: Christian Brauner , Adrian Reber CC: Eric Biederman , Pavel Emelyanov , Oleg Nesterov , Dmitry Safonov <0x7f454c46@gmail.com>, Andrei Vagin , =?utf-8?B?TWljaGHFgiBDxYJhcGnFhHNraQ==?= , "Kamil Yurtsever" , Dirk Petersen , Christine Flood , Casey Schaufler , Mike Rapoport , Radostin Stoyanov , Cyrill Gorcunov , Serge Hallyn , Stephen Smalley , Sargun Dhillon , Arnd Bergmann , "linux-security-module@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "selinux@vger.kernel.org" , Eric Paris , Jann Horn , "linux-fsdevel@vger.kernel.org" Subject: RE: [PATCH v5 5/6] prctl: Allow checkpoint/restore capable processes to change exe link Thread-Topic: [PATCH v5 5/6] prctl: Allow checkpoint/restore capable processes to change exe link Thread-Index: AQHWWrd9MS4DKBjnuUS3UVyYGQIobKkIwW2AgAAGAfA= Date: Wed, 15 Jul 2020 15:49:57 +0000 Message-ID: References: <20200715144954.1387760-1-areber@redhat.com> <20200715144954.1387760-6-areber@redhat.com> <20200715152011.whdeysy3ztqrnocn@wittgenstein> In-Reply-To: <20200715152011.whdeysy3ztqrnocn@wittgenstein> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.168.118.104] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org PiBPbiBXZWQsIEp1bCAxNSwgMjAyMCBhdCAwNDo0OTo1M1BNICswMjAwLCBBZHJpYW4gUmViZXIg d3JvdGU6DQo+ID4gRnJvbTogTmljb2xhcyBWaWVubm90IDxOaWNvbGFzLlZpZW5ub3RAdHdvc2ln bWEuY29tPg0KPiA+IA0KPiA+IEFsbG93IENBUF9DSEVDS1BPSU5UX1JFU1RPUkUgY2FwYWJsZSB1 c2VycyB0byBjaGFuZ2UgL3Byb2Mvc2VsZi9leGUuDQo+ID4gDQo+ID4gVGhpcyBjb21taXQgYWxz byBjaGFuZ2VzIHRoZSBwZXJtaXNzaW9uIGVycm9yIGNvZGUgZnJvbSAtRUlOVkFMIHRvIA0KPiA+ IC1FUEVSTSBmb3IgY29uc2lzdGVuY3kgd2l0aCB0aGUgcmVzdCBvZiB0aGUgcHJjdGwoKSBzeXNj YWxsIHdoZW4gDQo+ID4gY2hlY2tpbmcgY2FwYWJpbGl0aWVzLg0KPiBJIGFncmVlIHRoYXQgRUlO VkFMIHNlZW1zIHdlaXJkIGhlcmUgYnV0IHRoaXMgaXMgYSBwb3RlbnRpYWxseSB1c2VyIHZpc2li bGUgY2hhbmdlLiBNaWdodCBiZSBuaWNlIHRvIGhhdmUgdGhlIEVJTlZBTC0+RVBFUk0gY2hhbmdl IGJlIGFuIGFkZGl0aW9uYWwgcGF0Y2ggb24gdG9wIGFmdGVyIHRoaXMgb25lIHNvIHdlIGNhbiBy ZXZlcnQgaXQgaW4gY2FzZSBpdCBicmVha3Mgc29tZW9uZSAodW5saWtlbHkgdGhvdWdoKS4gSSBj YW4gc3BsaXQgdGhpcyBvdXQgbXlzZWxmIHRob3VnaCBzbyBubyBuZWVkIHRvIHJlc2VuZCBmb3Ig dGhhdCBhbG9uZS4NCj4gV2hhdCBJIHdvdWxkIGFsc28gcHJlZmVyIGlzIHRvIGhhdmUgc29tZSBo aXN0b3J5IGluIHRoZSBjb21taXQgbWVzc2FnZSB0YmguIFRoZSByZWFzb24gaXMgdGhhdCB3aGVu IHdlIHN0YXJ0ZWQgZGlzY3Vzc2luZyB0aGF0IHNwZWNpZmljIGNoYW5nZSBJIGhhZCB0byBodW50 IGRvd24gdGhlIGhpc3Rvcnkgb2YgY2hhbmdpbmcgL3Byb2Mvc2VsZi9leGUgYW5kIGhhZCB0byBk aWcgdXAgYW5kIHJlYWQgdGhyb3VnaCBhbmNpZW50IHRocmVhZHMgb24gbG9yZSB0byBjb21lIHVw IHdpdGggdGhlIGV4cGxhbmF0aW9uIHdoeSB0aGlzIGlzIHBsYWNlZCB1bmRlciBhIGNhcGFiaWxp dHkuIFRoZSBjb21taXQgbWVzc2FnZSBzaG91bGQgdGhlbiBhbHNvIG1lbnRpb24gdGhhdCB0aGVy ZSBhcmUgb3RoZXIgd2F5cyB0byBjaGFuZ2UgdGhlIC9wcm9jL3NlbGYvZXhlIGxpbmsgdGhhdCBk b24ndCByZXF1aXJlIGNhcGFiaWxpdGllcyBhbmQgdGhhdCAvcHJvYy9zZWxmL2V4ZSBpdHNlbGYg aXMgbm90IHNvbWV0aGluZyB1c2Vyc3BhY2Ugc2hvdWxkIHJlbHkgb24gZm9yIHNlY3VyaXR5LiBN YWlubHkgc28gdGhhdCBpbiBhIGZldyBtb250aHMveWVhcnMgd2UgY2FuIHJlYWQgdGhyb3VnaCB0 aGF0IGNvbW1pdCBtZXNzYWdlIGFuZCBnbyAiV2VpcmQsIGJ1dCBvay4iLiA6KQ0KPiBCdXQgbWF5 YmUgSSBjYW4ganVzdCByZXdyaXRlIHRoaXMgbXlzZWxmIHNvIHlvdSBkb24ndCBoYXZlIHRvIGdv IHRocm91Z2ggdGhlIHRyb3VibGUuIFRoaXMgaXMgcmVhbGx5IG5vdCBwZWRhbnRyeSBpdCdzIGp1 c3QgdGhhdCBpdCdzIGEgbG90IG9mIHdvcmsgZGlnZ2luZyB1cCB0aGUgcmVhc29ucyBmb3IgYSBw aWVjZSBvZiBjb2RlIGV4aXN0aW5nIHdoZW4gaXQncyByZWFsbHkgbm90IG9idmlvdXMuIDopDQoN CkhlbGxvIENocmlzdGlhbiwNCg0KSSBhZ3JlZS4NClRoYW5rIHlvdSBmb3Igc3VnZ2VzdGluZyBk b2luZyB0aGUgd29yaywgYnV0IHlvdSd2ZSBkb25lIHBsZW50eSBhbHJlYWR5LiBTbyB3ZSdsbCBj b21lIGJhY2sgdG8geW91IHdpdGg6DQoxKSBBIHNlcGFyYXRlIGNvbW1pdCBmb3IgRUlOVkFMLT5F UEVSTQ0KMikgQSBmdWxsIGhpc3Rvcnkgb2YgZGlzY3Vzc2lvbnMgaW4gdGhlIGNvbW1pdCBtZXNz YWdlIHJlbGF0ZWQgdG8gL3Byb2Mvc2VsZi9leGUgY2FwYWJpbGl0eSBjaGVjaw0KDQpUaGFua3Ms DQpOaWNvDQo=