lkml.org 
[lkml]   [2018]   [May]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH V2 06/15] taint: Add taint for insecure
    Date
    When adding new feature support, patches need to be
    incrementally applied and tested with temporal parameters.
    For such testing (or root-only) purposes, the new flag
    will serve to tag the kernel taint state properly.

    Suggested-by: H. Peter Anvin <hpa@zytor.com>
    Signed-off-by: Chang S. Bae <chang.seok.bae@intel.com>
    Cc: Andy Lutomirski <luto@kernel.org>
    Cc: Andi Kleen <ak@linux.intel.com>
    Cc: Dave Hansen <dave.hansen@linux.intel.com>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: Ingo Molnar <mingo@kernel.org>
    ---
    Documentation/sysctl/kernel.txt | 1 +
    include/linux/kernel.h | 3 ++-
    kernel/panic.c | 1 +
    3 files changed, 4 insertions(+), 1 deletion(-)

    diff --git a/Documentation/sysctl/kernel.txt b/Documentation/sysctl/kernel.txt
    index eded671d..06c4009 100644
    --- a/Documentation/sysctl/kernel.txt
    +++ b/Documentation/sysctl/kernel.txt
    @@ -992,6 +992,7 @@ ORed together. The letters are seen in "Tainted" line of Oops reports.
    32768 (K): The kernel has been live patched.
    65536 (X): Auxiliary taint, defined and used by for distros.
    131072 (T): The kernel was built with the struct randomization plugin.
    +262144 (Z): The kernel is running in a known insecure configuration.

    ==============================================================

    diff --git a/include/linux/kernel.h b/include/linux/kernel.h
    index 6a1eb0b..7051415 100644
    --- a/include/linux/kernel.h
    +++ b/include/linux/kernel.h
    @@ -563,7 +563,8 @@ extern enum system_states {
    #define TAINT_LIVEPATCH 15
    #define TAINT_AUX 16
    #define TAINT_RANDSTRUCT 17
    -#define TAINT_FLAGS_COUNT 18
    +#define TAINT_INSECURE 18
    +#define TAINT_FLAGS_COUNT 19

    struct taint_flag {
    char c_true; /* character printed when tainted */
    diff --git a/kernel/panic.c b/kernel/panic.c
    index 42e4874..53ea36a 100644
    --- a/kernel/panic.c
    +++ b/kernel/panic.c
    @@ -327,6 +327,7 @@ const struct taint_flag taint_flags[TAINT_FLAGS_COUNT] = {
    [ TAINT_LIVEPATCH ] = { 'K', ' ', true },
    [ TAINT_AUX ] = { 'X', ' ', true },
    [ TAINT_RANDSTRUCT ] = { 'T', ' ', true },
    + [ TAINT_INSECURE ] = { 'Z', ' ', false },
    };

    /**
    --
    2.7.4
    \
     
     \ /
      Last update: 2018-05-31 20:02    [W:2.539 / U:0.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site