In-Reply-To: <200701091927.l09JRJXM021563@turing-police.cc.vt.edu>
To: Valdis.Kletnieks@vt.edu
Cc: akpm@osdl.org, Christoph Hellwig <hch@infradead.org>,
       kjhall@linux.vnet.ibm.com, linux-kernel@vger.kernel.org,
       safford@watson.ibm.com
MIME-Version: 1.0
Subject: Re: mprotect abuse in slim
Message-ID: <OF7B947612.0655A2A9-ON8525725E.00763EE0-8525725E.00785BD0@us.ibm.com>
From: Mimi Zohar <zohar@us.ibm.com>
Date: Tue, 9 Jan 2007 16:45:51 -0500
Content-Type: text/plain; charset="US-ASCII"
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 856
Lines: 20

Valdis.Kletnieks@vt.edu wrote on 01/09/2007 02:27:19 PM:

>Which, unfortunately, creates incredibly brittle code when some attacker
>reads the SLIM source code and finds a way to force the non-simple case
>you ignore.
> 
>This is an area where you really need to do it *right*, or not at all.

For the non-simple case, it isn't that we 'ignore' the revocation,
but we prevent the cause for demotion to occur.  The current status is
that for those cases we can revoke, we demote the process and do the
revocation, and for those cases which we can't revoke, we prevent the 
process from being demoted.

Mimi Zohar
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/