Received: by 2002:a05:6a11:4021:0:0:0:0 with SMTP id ky33csp3050884pxb; Tue, 21 Sep 2021 13:24:28 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwEh+n+AwTOE4vjoOTR2jvwNeS5Pchdkz8HwoEbrT/Uv4iPMOuI9G4/qPrd/bGuyTSGlMBT X-Received: by 2002:aa7:dd8c:: with SMTP id g12mr37683074edv.280.1632255868430; Tue, 21 Sep 2021 13:24:28 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1632255868; cv=none; d=google.com; s=arc-20160816; b=eiCzLtXUYG2Zn7xpbDBtT9OOR0TqJI/vmX+5PQCUk5/VzaHAK+yDCj+4I9nV7eeI1i XE2WCKzzM96MTePzW0ddWcPPEYi6ci6T68rgZGy0RY1yo1RoT165W99pQQUfm+VitCvg 7Acd2p4CKEkKsq/H2/Bbz7OjWfnFDX2on9WRTP1ypuwS0yInRdIN18CYwODhANWWbYsI Gtak/VtmB5ZGMRXA3tdViEJNGt07+krdD+GFVoWrhF6UMBJbymJZ01P4oM9DdtBLdX3x 5QgUjuEdw0eQFOU8e0i+xbc+YYwx8GSvlJYS1B+6KNKagpcSG0gg6kEE9zzXelNoMa69 AiBQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=uUvwtgDvS9z+MmLCsIbndyuppV43gHnzlz5qvL6KeNg=; b=yV0kt/Ihm1hdoeYSCVVya5i2V3lp3EgS2PVqNTni1Mdd49Q+35hO6zkc2YfbRqhxWK dNEEo7G4LH4OnlIz/y4lnuItRb+hR/2x1BKzBA5cg1yygbjK4UCiIppvs54UOWt7tdZH ovoHNOpFr8YtUplfpM5BP14Htug8MEaLUeF60XFukl2xr/7VaQ1XfM+oi5S7Pfz9UtpV 6LgC7kMymC1zXO5G+TmZl0nJiX1nm53+wx/FE8ICIQ1GiUoZXicYso8zZ/6tFp7omBzl a5rd5ZGqeTsBuZXwdi1I7slbotUGTR/mj58OphQJFwYvRi778uLdgIPIVW3AL5thnoeR 8O1g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=c9uP+rap; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id 16si3431ejj.116.2021.09.21.13.23.58; Tue, 21 Sep 2021 13:24:28 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=c9uP+rap; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232465AbhIUTCp (ORCPT + 99 others); Tue, 21 Sep 2021 15:02:45 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:43612 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233905AbhIUTCn (ORCPT ); Tue, 21 Sep 2021 15:02:43 -0400 Received: from mail-pf1-x430.google.com (mail-pf1-x430.google.com [IPv6:2607:f8b0:4864:20::430]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 13171C061574 for ; Tue, 21 Sep 2021 12:01:15 -0700 (PDT) Received: by mail-pf1-x430.google.com with SMTP id g14so463206pfm.1 for ; Tue, 21 Sep 2021 12:01:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=uUvwtgDvS9z+MmLCsIbndyuppV43gHnzlz5qvL6KeNg=; b=c9uP+rap/UfN7fREE6h8u3lsZij8/9nesp5oAq6rWx9xNnYvzMF9PP463fCmsUqDar kEwNNzzupFjl3iVssQImb8bF3h2/B/8MlMGNIDKsuMe9bchBPSyFkLc+uuhUiy9QTIMI 6UVxssDsqkegyngHCgoDjyvtGGXIsR18yy7Rg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=uUvwtgDvS9z+MmLCsIbndyuppV43gHnzlz5qvL6KeNg=; b=qbBTzHf18+G+9jpELCDkhYUN/tKmgDKIXIla3ElUbD41LgirLENzHvzqp2/2uMYqJC BKLNJhnJs1AW/nnWWfD6S5DRss6v+IDr9NOLJ/z/+497xfxQWNI1+U7xXl5GAO3Yy04D Ip+vhcH2Txawj0q8HVr2vDNZRnZUdXL7WwRuOZmQPxcl9BBS1L77b0i+Xr/As4unGsbs EVZyCn7wXYaz6EbHhkRwpv0KPJW0ujk1qgm5aVoI11yA8lrl4ob8QGK2GCo6g6ZfZ8Qs NfRq3dA29mKGkESOVaKo0+1ijlXGSW/BF9lrd+L0NUVfijhWlRwrIr1kGfcHeFo4JjNE 7R8g== X-Gm-Message-State: AOAM530NZGB+73oM7V6Kg6cK1FHNPI15EuLe9QgI7uwhikbNfOokMNdC GGufFUC4NwCeB8MRmugJ2asNWQ== X-Received: by 2002:a63:2cce:: with SMTP id s197mr3869655pgs.45.1632250874538; Tue, 21 Sep 2021 12:01:14 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id t6sm3451285pjr.36.2021.09.21.12.01.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Sep 2021 12:01:13 -0700 (PDT) Date: Tue, 21 Sep 2021 12:01:12 -0700 From: Kees Cook To: Stephen Kitt Cc: Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Vlastimil Babka , James Morris , "Serge E . Hallyn" , linux-mm@kvack.org, linux-security-module@vger.kernel.org, linux-hardening@vger.kernel.org, linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org Subject: Re: [PATCH] mm: Remove HARDENED_USERCOPY_FALLBACK Message-ID: <202109211200.14E421C@keescook> References: <20210921061149.1091163-1-steve@sk2.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210921061149.1091163-1-steve@sk2.org> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Sep 21, 2021 at 08:11:49AM +0200, Stephen Kitt wrote: > This has served its purpose and is no longer used. All usercopy > violations appear to have been handled by now, any remaining > instances (or new bugs) will cause copies to be rejected. > > This isn't a direct revert of commit 2d891fbc3bb6 ("usercopy: Allow > strict enforcement of whitelists"); since usercopy_fallback is > effectively 0, the fallback handling is removed too. > > This also removes the usercopy_fallback module parameter on > slab_common. > > Link: https://github.com/KSPP/linux/issues/153 > Signed-off-by: Stephen Kitt > Suggested-by: Kees Cook Thanks for doing this! Acked-by: Kees Cook -- Kees Cook