Messages in this thread | | | Subject | Re: [kernel-hardening] [PATCH 00/23] Hardened usercopy whitelisting | From | Rik van Riel <> | Date | Tue, 20 Jun 2017 15:41:13 -0400 |
| |
On Mon, 2017-06-19 at 16:36 -0700, Kees Cook wrote: > This series is modified from Brad Spengler/PaX Team's PAX_USERCOPY > code > in the last public patch of grsecurity/PaX based on our understanding > of the code. Changes or omissions from the original code are ours and > don't reflect the original grsecurity/PaX code. > > David Windsor did the bulk of the porting, refactoring, splitting, > testing, etc; I just did some extra tweaks, hunk moving, and small > extra patches. > > > This updates the slab allocator to add annotations (useroffset and > usersize) to define allowed usercopy regions.
This is a great improvement over the old system of having a few whitelisted kmalloc caches, and bounce buffering to copy data from caches that are not whitelisted!
I like it.
-- All rights reversed[unhandled content-type:application/pgp-signature] | |