Received-SPF: pass (google.com: domain of linux-kernel+bounces-98157-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223;
Date: Sun, 3 Mar 2024 15:34:08 +0100
From: Joel Granados <j.granados@samsung.com>
To: Thomas =?utf-8?Q?Wei=C3=9Fschuh?= <linux@weissschuh.net>
CC: Luis Chamberlain <mcgrof@kernel.org>, Kees Cook <keescook@chromium.org>,
	"David S. Miller" <davem@davemloft.net>, Eric Dumazet <edumazet@google.com>,
	Jakub Kicinski <kuba@kernel.org>, Paolo Abeni <pabeni@redhat.com>,
	<linux-kernel@vger.kernel.org>, <linux-fsdevel@vger.kernel.org>,
	<netdev@vger.kernel.org>
Subject: Re: [PATCH v2] sysctl: treewide: constify
 ctl_table_root::permissions
Message-ID: <20240303143408.sxrbd7pykmyhwu5f@joelS2.panther.com>
Precedence: bulk
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="qqan5da6s22ibigg"
Content-Disposition: inline
In-Reply-To: <20240223-sysctl-const-permissions-v2-1-0f988d0a6548@weissschuh.net>
CMS-TYPE: 201P
References: <CGME20240223155229eucas1p24a18fa79cda02a703bcceff3bd38c2ba@eucas1p2.samsung.com>
	<20240223-sysctl-const-permissions-v2-1-0f988d0a6548@weissschuh.net>

--qqan5da6s22ibigg
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hey Thomas

Just to be sure I'm following. This is V2 of "[PATCH] sysctl: treewide:
constify ctl_table_root::set_ownership". Right? I ask, because the
subject changes slightly.

Best

On Fri, Feb 23, 2024 at 04:52:16PM +0100, Thomas Wei=DFschuh wrote:
> The permissions callback is not supposed to modify the ctl_table.
> Enforce this expectation via the typesystem.
>=20
> The patch was created with the following coccinelle script:
>=20
>   @@
>   identifier func, head, ctl;
>   @@
>=20
>   int func(
>     struct ctl_table_header *head,
>   - struct ctl_table *ctl)
>   + const struct ctl_table *ctl)
>   { ... }
>=20
> (insert_entry() from fs/proc/proc_sysctl.c is a false-positive)
>=20
> The three changed locations were validated through manually inspection
> and compilation.
>=20
> In addition a search for '.permissions =3D' was done over the full tree to
> look for places that were missed by coccinelle.
> None were found.
>=20
> This change also is a step to put "struct ctl_table" into .rodata
> throughout the kernel.
>=20
> Signed-off-by: Thomas Wei=DFschuh <linux@weissschuh.net>
> ---
> To: Luis Chamberlain <mcgrof@kernel.org>
> To: Kees Cook <keescook@chromium.org>
> To: Joel Granados <j.granados@samsung.com>
> To: David S. Miller <davem@davemloft.net>
> Signed-off-by: Thomas Wei=DFschuh <linux@weissschuh.net>
>=20
> Changes in v2:
> - flesh out commit messages
> - Integrate changes to set_ownership and ctl_table_args into a single
>   series
> - Link to v1: https://lore.kernel.org/r/20231226-sysctl-const-permissions=
-v1-1-5cd3c91f6299@weissschuh.net
> ---
> The patch is meant to be merged via the sysctl tree.
>=20
> There is an upcoming series that will introduce a new implementation of
> .permission which would need to be adapted [0].
> The adaption would be trivial as the 'table' parameter also not modified
> there.
>=20
> This change was originally part of the sysctl-const series [1].
> To slim down that series and reduce the message load on other
> maintainers to a minimumble, submit this patch on its own.
>=20
> [0] https://lore.kernel.org/lkml/20240222160915.315255-1-aleksandr.mikhal=
itsyn@canonical.com/
> [1] https://lore.kernel.org/lkml/20231204-const-sysctl-v2-2-7a5060b11447@=
weissschuh.net/
> ---
>  include/linux/sysctl.h | 2 +-
>  ipc/ipc_sysctl.c       | 2 +-
>  kernel/ucount.c        | 2 +-
>  net/sysctl_net.c       | 2 +-
>  4 files changed, 4 insertions(+), 4 deletions(-)
>=20
> diff --git a/include/linux/sysctl.h b/include/linux/sysctl.h
> index ee7d33b89e9e..0a55b5aade16 100644
> --- a/include/linux/sysctl.h
> +++ b/include/linux/sysctl.h
> @@ -207,7 +207,7 @@ struct ctl_table_root {
>  	void (*set_ownership)(struct ctl_table_header *head,
>  			      struct ctl_table *table,
>  			      kuid_t *uid, kgid_t *gid);
> -	int (*permissions)(struct ctl_table_header *head, struct ctl_table *tab=
le);
> +	int (*permissions)(struct ctl_table_header *head, const struct ctl_tabl=
e *table);
>  };
> =20
>  #define register_sysctl(path, table)	\
> diff --git a/ipc/ipc_sysctl.c b/ipc/ipc_sysctl.c
> index 8c62e443f78b..b087787f608f 100644
> --- a/ipc/ipc_sysctl.c
> +++ b/ipc/ipc_sysctl.c
> @@ -190,7 +190,7 @@ static int set_is_seen(struct ctl_table_set *set)
>  	return &current->nsproxy->ipc_ns->ipc_set =3D=3D set;
>  }
> =20
> -static int ipc_permissions(struct ctl_table_header *head, struct ctl_tab=
le *table)
> +static int ipc_permissions(struct ctl_table_header *head, const struct c=
tl_table *table)
>  {
>  	int mode =3D table->mode;
> =20
> diff --git a/kernel/ucount.c b/kernel/ucount.c
> index 4aa6166cb856..90300840256b 100644
> --- a/kernel/ucount.c
> +++ b/kernel/ucount.c
> @@ -38,7 +38,7 @@ static int set_is_seen(struct ctl_table_set *set)
>  }
> =20
>  static int set_permissions(struct ctl_table_header *head,
> -				  struct ctl_table *table)
> +			   const struct ctl_table *table)
>  {
>  	struct user_namespace *user_ns =3D
>  		container_of(head->set, struct user_namespace, set);
> diff --git a/net/sysctl_net.c b/net/sysctl_net.c
> index 051ed5f6fc93..ba9a49de9600 100644
> --- a/net/sysctl_net.c
> +++ b/net/sysctl_net.c
> @@ -40,7 +40,7 @@ static int is_seen(struct ctl_table_set *set)
> =20
>  /* Return standard mode bits for table entry. */
>  static int net_ctl_permissions(struct ctl_table_header *head,
> -			       struct ctl_table *table)
> +			       const struct ctl_table *table)
>  {
>  	struct net *net =3D container_of(head->set, struct net, sysctls);
> =20
>=20
> ---
> base-commit: ffd2cb6b718e189e7e2d5d0c19c25611f92e061a
> change-id: 20231226-sysctl-const-permissions-d7cfd02a7637
>=20
> Best regards,
> --=20
> Thomas Wei=DFschuh <linux@weissschuh.net>
>=20

--=20

Joel Granados

--qqan5da6s22ibigg
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=oGDK
-----END PGP SIGNATURE-----

--qqan5da6s22ibigg--