Received: by 2002:a05:6358:d09b:b0:dc:cd0c:909e with SMTP id jc27csp1614754rwb; Thu, 8 Dec 2022 13:00:35 -0800 (PST) X-Google-Smtp-Source: AA0mqf7sK4GLinxg9vIHY+KdVr4EjwCHSs+LMAKLRAepa09B/fFiEcoDs2V8j3OF6dzgkCk3NUII X-Received: by 2002:a17:906:d10f:b0:7c0:f727:5dd2 with SMTP id b15-20020a170906d10f00b007c0f7275dd2mr13155372ejz.319.1670533235213; Thu, 08 Dec 2022 13:00:35 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1670533235; cv=none; d=google.com; s=arc-20160816; b=ttWR/T2hXTTpHoaXXgeRUNxExJ9ipbTRvwBPWuDIpv48elP5bXsk+cXSKUYq1EyLtU 7tQdaPuglDE7MYCtC077Kp0arO5DZGpB/CIa4uhSOWnsKIJCAq4KgZeW2axBGoOAjfhx fHF8xWOADTD5LsrVKemXjM8SMLLFa+mWFBwDdV6jOC7yywSM387uEiG5jyT+8gHeh8PF dQyVDQmy/qGhIAv/KxQjB+kjwDNcb6s/2XZ/bgV8NfSvWUluu9m9v1fxqRZcu3AGechO MQREo+FeyAENSSH+jLOOApKPqsLXZfDZKO3aaTmZCJVP4qOvQfMIgDhRYBbytIQ5Y/Px 909w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=NJg0tjf49GVzZZXYJm/ESQ/vYejcTaVis8L45uiNSHA=; b=oDhvwEH69Cg3aWoGz3IwWy0CSasj5hlgiW9G8nxUqH1AXIg3f3M79z2S6xixX470a2 MUP3qOjkLo0TE6cVNj/5IZDeRSllVS80wrzt+okPrQ+ajgSzfdjkzWNxp/Nw4nmRovNz SQQ1Kzbo0dsyQAwc7H33wQo/cUUyS0QV2cETWVFvmfURXPp/VW/Bu7bMpGL1HMdkhT4y TdLamGjMpb+jsvDt9ePiWgbOdetgUuX7ixVRdBF1mmGy2Equ1LDIABaf0DcswnYA746I oBagxKoMx5h2F4B5ZeWE3S4QJshYcdmVFN9b0xQTHUtUUGBXR+7w3NfO/Y1Crey18uyr NDig== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=WGDXl+n8; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id m24-20020a056402051800b0046cb20e357esi6504707edv.366.2022.12.08.13.00.17; Thu, 08 Dec 2022 13:00:35 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=WGDXl+n8; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229838AbiLHU4A (ORCPT + 73 others); Thu, 8 Dec 2022 15:56:00 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48062 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229734AbiLHUz7 (ORCPT ); Thu, 8 Dec 2022 15:55:59 -0500 Received: from mail-pf1-x42a.google.com (mail-pf1-x42a.google.com [IPv6:2607:f8b0:4864:20::42a]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 0E7DD8C452 for ; Thu, 8 Dec 2022 12:55:57 -0800 (PST) Received: by mail-pf1-x42a.google.com with SMTP id 65so2224859pfx.9 for ; Thu, 08 Dec 2022 12:55:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=NJg0tjf49GVzZZXYJm/ESQ/vYejcTaVis8L45uiNSHA=; b=WGDXl+n8K/dWeZKeldPrcD/v5Zbw4izCFegv/+gHVqJz5fo4i63IakbdgfDk32UOJ0 K7CA6axewHrdePgh+eO1x8V+20MgZoSmeS/R+OUwnzbSv5HurnxALTfCXtREO7ppxxNa U6LdFtKTrAAZMCV9qJ/PEyYe9JUYQMujpcuIg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=NJg0tjf49GVzZZXYJm/ESQ/vYejcTaVis8L45uiNSHA=; b=q0aMtCHcJnB5HFrc/G9ceVrMdkR1m2QQ4Cn//1tELezMJr8Cpbeg7DYcpuegXDTgNY yQPNnoven67wMLqiLjAg1ox2YsUvw0OhfsAHNU/M/tvxW+pDbYCg+6eE7qEdUNKLX4GD 9duHL+EG8yit8Rg6Xi/5aK+eHcbRrAVVzXjwrZFviEvPB0TBxcqrdcm8l6wVqvBSw020 dTKyPs3+VgsrQLq3JwLGLfbxeVSRL38VwIiUzLvfQeQUxMMv4kHvYt6ZwGVg+tEmN8SK qmgLuWuJWedzEdfXjkaapj8VIsmFwGuAczcSsvzeRb/DUxlKdhtIlhDCko3xye2p10W/ YyWQ== X-Gm-Message-State: ANoB5pntzqk2nJY8ocZdQ/DjSLf+jF7csjBjFzDrrG4F1vpTQluK9Mgx abSOHwBulnof08JzRdhsiQJeyw== X-Received: by 2002:a62:e219:0:b0:577:5678:bc80 with SMTP id a25-20020a62e219000000b005775678bc80mr9602372pfi.62.1670532956522; Thu, 08 Dec 2022 12:55:56 -0800 (PST) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id a7-20020aa78e87000000b005764c8f8f07sm12310108pfr.84.2022.12.08.12.55.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 08 Dec 2022 12:55:56 -0800 (PST) Date: Thu, 8 Dec 2022 12:55:55 -0800 From: Kees Cook To: Jeff Xu Cc: jeffxu@chromium.org, skhan@linuxfoundation.org, akpm@linux-foundation.org, dmitry.torokhov@gmail.com, dverkamp@chromium.org, hughd@google.com, jorgelo@chromium.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-mm@kvack.org, jannh@google.com, linux-hardening@vger.kernel.org Subject: Re: [PATCH v6 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC Message-ID: <202212081255.22D92C5@keescook> References: <20221207154939.2532830-1-jeffxu@google.com> <202212080809.687CC8BC23@keescook> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Dec 08, 2022 at 10:33:19AM -0800, Jeff Xu wrote: > On Thu, Dec 8, 2022 at 8:13 AM Kees Cook wrote: > > > > On Wed, Dec 07, 2022 at 03:49:33PM +0000, jeffxu@chromium.org wrote: > > > This is V6 version of patch: see [4] [5] [6] [7] for previous versions. > > > > When sending a new version, can you include an overview of what changed > > between this version and the prior version? This helps reviewers who are > > following along, so it's easier to focus our attention on the > > differences. Also, it's helpful to version the links: > > > > > [4] https://lwn.net/Articles/890096/ > > > [5] https://lore.kernel.org/lkml/20220805222126.142525-1-jeffxu@google.com/ > > > [6] https://lore.kernel.org/lkml/20221202013404.163143-1-jeffxu@google.com/ > > > [7] https://lore.kernel.org/lkml/20221206152358.1966099-1-jeffxu@google.com/ > > > > e.g.: > > > > v6: > > - moved foo to bar > > - improve comments for baz > > v5: https://lore.kernel.org/lkml/20221206152358.1966099-1-jeffxu@google.com/ > > v3: https://lore.kernel.org/lkml/20221202013404.163143-1-jeffxu@google.com/ > > v2: ...etc > > > Will do! > Much appreciated for helping me through the process of my first patch > in the kernel. Happy to help! I'm excited to see this gap in memfd security closed. :) -- Kees Cook