lkml.org 
[lkml]   [2011]   [Jul]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v7 00/16] EVM
    Quoting David Safford (safford@watson.ibm.com):
    > On Wed, 2011-06-29 at 21:57 -0400, Kyle Moffett wrote:
    > > There have been numerous cases in the past where a corrupt or invalid
    > > filesystem causes kernel panics or even exploitable overflows or memory
    > > corruption; see the history of the "fsfuzzer" tool for more information.
    >
    > Seems to me code bugs in the kernel should be fixed, given the universal
    > practice of automounting of removable media, and loopback mounting
    > images, regardless of EVM.

    Hi David,

    yeah, this would also be nice for making people feel cozier about
    supporting unprivileged fs mounts in general. I wonder if a real
    project around the idea of strengthening the robustness of the fs
    code, starting with the superblock parsing for a few of the most
    comment filesystems, could take off. A combination of

    . code auditing and test (i.e. fsfuzzer)
    . moving parts of the code to unprivileged userspace
    . marking audited filesystems as unprivileged-mountable, in the
    way Miklos' patchset a few years ago did
    . so that those who want to can refuse auto-mount of any not
    audited filesystems.

    -serge


    \
     
     \ /
      Last update: 2011-07-18 20:49    [W:0.022 / U:0.560 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site