Tycho Andersen
6a21cc50f0
seccomp: add a return code to trap to userspace ...
This patch introduces a means for syscalls matched in seccomp to notify
some other task that a particular filter has been triggered.
The motivation for this is primarily for use with containers. For example,
if a container does an init_module(), we obviously don't want to load this
untrusted code, which may be compiled for the wrong version of the kernel
anyway. Instead, we could parse the module image, figure out which module
the container is trying to load and load it on the host.
As another example, containers cannot mount() in general since various
filesystems assume a trusted image. However, if an orchestrator knows that
e.g. a particular block device has not been exposed to a container for
writing, it want to allow the container to mount that block device (that
is, handle the mount for it).
This patch adds functionality that is already possible via at least two
other means that I know about, both of which involve ptrace(): first, one
could ptrace attach, and then iterate through syscalls via PTRACE_SYSCALL.
Unfortunately this is slow, so a faster version would be to install a
filter that does SECCOMP_RET_TRACE, which triggers a PTRACE_EVENT_SECCOMP.
Since ptrace allows only one tracer, if the container runtime is that
tracer, users inside the container (or outside) trying to debug it will not
be able to use ptrace, which is annoying. It also means that older
distributions based on Upstart cannot boot inside containers using ptrace,
since upstart itself uses ptrace to monitor services while starting.
The actual implementation of this is fairly small, although getting the
synchronization right was/is slightly complex.
Finally, it's worth noting that the classic seccomp TOCTOU of reading
memory data from the task still applies here, but can be avoided with
careful design of the userspace handler: if the userspace handler reads all
of the task memory that is necessary before applying its security policy,
the tracee's subsequent memory edits will not be read by the tracer.
Signed-off-by: Tycho Andersen <tycho@tycho.ws>
CC: Kees Cook <keescook@chromium.org>
CC: Andy Lutomirski <luto@amacapital.net>
CC: Oleg Nesterov <oleg@redhat.com>
CC: Eric W. Biederman <ebiederm@xmission.com>
CC: "Serge E. Hallyn" <serge@hallyn.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
CC: Christian Brauner <christian@brauner.io>
CC: Tyler Hicks <tyhicks@canonical.com>
CC: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
Signed-off-by: Kees Cook <keescook@chromium.org>
2018-12-11 16:28:41 -08:00
mmc: mmci: Drop support for pdata GPIO numbers
2018-10-08 11:40:43 +02:00
i40e: Update status codes
2018-10-31 10:57:43 -07:00
libceph: assume argonaut on the server side
2018-11-08 17:51:11 +01:00
Merge branch 'clk-ti' into clk-next
2018-10-18 15:41:21 -07:00
arm64: zynqmp: SoC CLK changes for v4.20
2018-10-10 13:47:06 +02:00
fpga: add devm_fpga_region_create
2018-10-16 11:13:50 +02:00
IOMMU Updates for Linux v4.20
2018-10-26 10:50:10 -07:00
This is the bulk of GPIO changes for the v4.20 series:
2018-10-23 08:45:05 +01:00
KVM updates for v4.20
2018-10-25 17:57:35 -07:00
chrome-platform for v4.20
2018-10-31 16:47:55 -07:00
First merge window pull request
2018-10-26 07:38:19 -07:00
mmc: core: add helper to see if a host is doing a retune
2018-10-08 11:40:43 +02:00
mtd: nand: Fix nanddev_pos_next_page() kernel-doc header
2018-11-06 17:40:31 +01:00
netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
2018-11-03 13:27:50 +01:00
arm64: perf: Reject stand-alone CHAIN events for PMUv3
2018-10-12 15:25:17 +01:00
USB/PHY patches for 4.20-rc1
2018-10-26 08:14:13 -07:00
platform-drivers-x86 for v4.20-1
2018-11-01 08:42:21 -07:00
First merge window pull request
2018-10-26 07:38:19 -07:00
regulator/mfd: Support for the ROHM BD71847
2018-09-28 15:07:30 +01:00
More power management updates for 4.20-rc1
2018-10-30 09:08:07 -07:00
Qualcomm ARM Based Driver Updates for v4.20
2018-10-02 10:11:12 +02:00
Merge remote-tracking branch 'spi/topic/of' into spi-next
2018-10-21 17:00:17 +01:00
NFS client bugfixes for Linux 4.20
2018-11-04 08:20:09 -08:00
USB/PHY patches for 4.20-rc1
2018-10-26 08:14:13 -07:00
pci-v4.20-changes
2018-10-25 06:50:48 -07:00
EDAC, skx: Fix randconfig builds
2018-10-31 19:24:21 +01:00
signal: Distinguish between kernel_siginfo and siginfo
2018-10-03 16:47:43 +02:00
blkcg: revert blkcg cleanups series
2018-11-01 19:59:53 -06:00
linux/bitmap.h: relax comment on compile-time constant nbits
2018-10-31 08:54:12 -07:00
bitops: protect variables in bit_clear_unless() macro
2018-10-15 15:43:06 +02:00
blkcg: revert blkcg cleanups series
2018-11-01 19:59:53 -06:00
blk-mq: provide helper for setting up an SQ queue and tag set
2018-10-15 20:05:18 -06:00
block: Move power management code into a new source file
2018-09-26 15:11:28 -06:00
blkcg: revert blkcg cleanups series
2018-11-01 19:59:53 -06:00
block: Introduce blk_revalidate_disk_zones()
2018-10-25 11:17:40 -06:00
bpf: introduce per-cpu cgroup local storage
2018-10-01 16:18:32 +02:00
bpf: add queue and stack maps
2018-10-19 13:24:31 -07:00
bpf: add queue and stack maps
2018-10-19 13:24:31 -07:00
bpf: fix partial copy of map_ptr when dst is scalar
2018-10-31 16:53:17 -07:00
ext4: convert fault handler to use vm_fault_t type
2018-10-02 22:20:50 -04:00
psi: cgroup support
2018-10-26 16:26:32 -07:00
for-linus-20181102
2018-11-02 11:25:48 -07:00
clk: clk: Add clk_gate_restore_context function
2018-10-03 15:29:15 +03:00
Merge branches 'clk-tegra' and 'clk-bulk-get-all' into clk-next
2018-10-18 15:43:38 -07:00
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-10-25 11:14:36 -07:00
Merge branch 'core/urgent' into x86/urgent, to pick up objtool fix
2018-11-03 23:42:16 +01:00
Compiler Attributes: use feature checks instead of version checks
2018-09-30 20:14:03 +02:00
compiler: remove __no_sanitize_address_or_inline again
2018-11-05 08:14:18 -08:00
Compiler Attributes: use feature checks instead of version checks
2018-09-30 20:14:03 +02:00
compiler: remove __no_sanitize_address_or_inline again
2018-11-05 08:14:18 -08:00
Compiler Attributes: improve explanation of header
2018-11-08 11:33:52 +01:00
include/linux/compiler*.h: define asm_volatile_goto
2018-11-06 15:30:16 +01:00
signal: Distinguish between kernel_siginfo and siginfo
2018-10-03 16:47:43 +02:00
coresight: Add support for CLAIM tag protocol
2018-09-25 20:09:19 +02:00
clocksource/drivers/c-sky: Add C-SKY SMP timer
2018-11-02 19:39:54 +01:00
cpuidle: menu: Fix wakeup statistics updates for polling state
2018-10-04 10:23:37 +02:00
kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled
2018-10-06 12:09:26 +02:00
crypto: user - Implement a generic crypto statistics
2018-09-28 12:46:25 +08:00
macintosh: Use common code to access RTC
2018-10-08 22:53:10 +11:00
locking/lockdep: Make global debug_locks* variables read-mostly
2018-10-19 07:53:18 +02:00
delayacct: track delays from thrashing cache pages
2018-10-26 16:26:32 -07:00
PM / devfreq: Make update_devfreq() public
2018-10-02 10:16:41 +09:00
- Biggest change this cycle is to remove support for the legacy IO path
2018-10-26 12:57:38 -07:00
Driver core patches for 4.20-rc1
2018-10-26 08:42:25 -07:00
dma-debug: Check for drivers mapping invalid addresses in dma_map_single()
2018-10-08 09:44:17 +02:00
swiotlb: remove the overflow buffer
2018-10-19 08:43:46 +02:00
dma-mapping: translate __GFP_NOFAIL to DMA_ATTR_NO_WARN
2018-10-09 15:08:26 +02:00
dns: Allow the dns resolver to retrieve a server set
2018-10-04 09:40:52 -07:00
EDAC: Raise the maximum number of memory controllers
2018-09-27 07:52:05 +02:00
efi/x86: Handle page faults occurring while running EFI runtime services
2018-09-26 12:14:55 +02:00
block: move call of scheduler's ->completed_request() hook
2018-09-27 17:34:52 -06:00
f2fs: guarantee journalled quota data by checkpoint
2018-10-22 17:54:47 -07:00
fanotify: support reporting thread id instead of process id
2018-10-08 13:48:45 +02:00
bpf: add bpf_jit_limit knob to restrict unpriv allocations
2018-10-25 17:11:42 -07:00
vfs: rework data cloning infrastructure
2018-11-02 09:33:08 -07:00
fsnotify: generalize handling of extra event flags
2018-10-04 13:28:02 +02:00
This is the 4.19-rc6 release
2018-10-01 08:58:57 -06:00
mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask
2018-11-03 10:09:37 -07:00
media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
2018-09-24 09:28:41 -04:00
HID: fix up .raw_event() documentation
2018-11-06 13:59:08 +01:00
mm/hmm: use a structure for update callback parameters
2018-10-31 08:54:12 -07:00
mm/gup: cache dev_pagemap while pinning pages
2018-10-26 16:38:15 -07:00
mm: migration: fix migration of huge PMD shared pages
2018-10-05 16:32:04 -07:00
hwrng: core - document the quality field
2018-10-05 10:16:56 +08:00
hwmon: (core) Add hwmon_in_enable attribute
2018-10-10 20:37:13 -07:00
vmbus: split ring buffer allocation from open
2018-09-25 20:33:24 +02:00
clockevents/drivers/i8253: Add support for PIT shutdown quirk
2018-11-04 11:04:46 +01:00
ida: Convert to XArray
2018-10-21 10:46:33 -04:00
mac80211: minstrel: Enable STBC and LDPC for VHT Rates
2018-10-11 16:01:00 +02:00
ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
2018-10-29 20:26:06 -07:00
LSM: Convert from initcall to struct lsm_info
2018-10-10 20:40:21 -07:00
iommu/vt-d: Enable base Intel IOMMU debugfs support
2018-09-25 14:33:43 +02:00
genirq: Fix grammar s/an /a /
2018-10-09 07:50:41 +02:00
fs/iomap.c: change return type to vm_fault_t
2018-10-26 16:25:18 -07:00
Merge branches 'arm/renesas', 'arm/smmu', 'ppc/pamu', 'x86/vt-d', 'x86/amd' and 'core' into next
2018-10-10 18:09:37 +02:00
iommu/iova: Optimise attempts to allocate iova from 32bit address range
2018-09-25 10:18:27 +02:00
irqchip/irq-mvebu-sei: Add new driver for Marvell SEI
2018-10-02 12:00:08 +01:00
jump_label: Annotate entries that operate on __init code earlier
2018-09-27 17:56:48 +02:00
KEYS: Provide key type operations for asymmetric key ops [ver #2 ]
2018-10-26 09:30:46 +01:00
KEYS: Provide key type operations for asymmetric key ops [ver #2 ]
2018-10-26 09:30:46 +01:00
leds: core: Introduce LED pattern trigger
2018-10-11 21:55:58 +02:00
lightnvm: pblk: fix mapping issue on failed writes
2018-10-09 08:25:07 -06:00
include/linux/linkage.h: align weak symbols
2018-10-26 16:25:18 -07:00
net: phy: Replace phy driver features u32 with link_mode bitmap
2018-10-01 22:55:36 -07:00
list: introduce list_bulk_move_tail helper
2018-10-10 15:20:54 -05:00
locking/lockdep: Make class->ops a percpu counter and move it under CONFIG_DEBUG_LOCKDEP=y
2018-10-09 09:56:33 +02:00
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2018-10-24 11:49:35 +01:00
mm: don't miss the last page because of round-off error
2018-10-26 16:25:19 -07:00
memblock: stop using implicit alignment to SMP_CACHE_BYTES
2018-10-31 08:54:16 -07:00
mm/memcontrol.c: convert mem_cgroup_id::ref to refcount_t type
2018-10-26 16:26:35 -07:00
mm/memory_hotplug: make add_memory() take the device_hotplug_lock
2018-10-31 08:54:17 -07:00
mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask
2018-11-03 10:09:37 -07:00
PCI/P2PDMA: Add PCI p2pmem DMA mappings to adjust the bus offset
2018-10-17 12:18:16 -05:00
net: phy: micrel: add Microchip KSZ9131 initial driver
2018-10-19 17:02:23 -07:00
net: phy: Add limkmode equivalents to some of the MII ethtool helpers
2018-10-01 22:55:36 -07:00
s390 updates for 4.20-rc2
2018-11-09 06:30:44 -06:00
Revert "mm, mmu_notifier: annotate mmu notifiers with blockable invalidate callbacks"
2018-10-26 16:25:19 -07:00
mm: remove CONFIG_NO_BOOTMEM
2018-10-31 08:54:14 -07:00
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2018-10-24 11:49:35 +01:00
net: Plumb support for filtering ipv4 and ipv6 multicast route dumps
2018-10-16 00:13:39 -07:00
genirq/msi: Allow creation of a tree-based irqdomain for platform-msi
2018-10-02 11:16:38 +01:00
UAPI: ndctl: Remove use of PAGE_SIZE
2018-10-17 13:56:58 -07:00
net: bql: add __netdev_tx_sent_queue()
2018-11-03 15:40:01 -07:00
netfilter: avoid erronous array bounds warning
2018-09-28 14:47:40 +02:00
netlink: Add answer_flags to netlink_callback
2018-10-16 00:13:12 -07:00
netpoll: allow cleanup to be synchronous
2018-10-19 17:01:43 -07:00
NFS: Convert lookups of the open context to RCU
2018-09-30 15:35:17 -04:00
NFSv3: Improve NFSv3 performance when server returns no post-op attributes
2018-09-30 15:35:17 -04:00
NFS: Remove private spinlock in struct nfs_pgio_header
2018-09-30 15:35:17 -04:00
watchdog/core: Add missing prototypes for weak functions
2018-11-06 21:58:00 +01:00
include/linux/notifier.h: SRCU: fix ctags
2018-11-03 10:09:37 -07:00
nvme: call nvme_complete_rq when nvmf_check_ready fails for mpath I/O
2018-10-01 14:16:13 -07:00
nvmem: use EOPNOTSUPP instead of ENOSYS
2018-09-28 15:14:55 +02:00
nvmem: use EOPNOTSUPP instead of ENOSYS
2018-09-28 15:14:55 +02:00
TTY/Serial patches for 4.20-rc1
2018-10-29 10:42:20 -07:00
iommu/of: make of_pci_map_rid() available for other devices too
2018-09-25 09:47:52 +02:00
mm: create non-atomic version of SetPageReserved for init use
2018-10-26 16:26:34 -07:00
page cache: Convert find_get_entries_tag to XArray
2018-10-21 10:46:35 -04:00
pagevec: Use xa_mark_t
2018-10-21 10:46:39 -04:00
PCI: Remove pci_set_dma_max_seg_size()
2018-10-10 15:47:00 -05:00
PCI/P2PDMA: Introduce configfs/sysfs enable attribute helpers
2018-10-17 12:18:17 -05:00
pci-v4.20-changes
2018-10-25 06:50:48 -07:00
pci-v4.20-changes
2018-10-25 06:50:48 -07:00
percpu: remove PER_CPU_DEF_ATTRIBUTES macro
2018-10-31 08:54:14 -07:00
percpu-refcount: Introduce percpu_ref_resurrect()
2018-09-26 15:11:29 -06:00
mm: dax: add comment for PFN_SPECIAL
2018-10-26 16:26:35 -07:00
net: phy: improve handling delayed work
2018-10-01 23:14:10 -07:00
PM / Domains: Document flags for genpd
2018-10-18 12:25:10 +02:00
macintosh: Use common code to access RTC
2018-10-08 22:53:10 +11:00
signal: Distinguish between kernel_siginfo and siginfo
2018-10-03 16:47:43 +02:00
psi: cgroup support
2018-10-26 16:26:32 -07:00
psi: pressure stall information for CPU, memory, and IO
2018-10-26 16:26:32 -07:00
pstore/ram: Clarify resource reservation labels
2018-10-22 07:11:58 -07:00
Merge branch 'siginfo-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2018-10-24 11:22:39 +01:00
spi: pxa2xx: Add devicetree support
2018-10-11 15:28:04 +01:00
firmware: qcom: scm: Add WLAN VMID for Qualcomm SCM interface
2018-10-13 20:31:37 +03:00
radix tree: Remove multiorder support
2018-10-21 10:46:48 -04:00
lib/rbtree.c: fix typo in comment of rb_insert_augmented()
2018-10-31 08:54:13 -07:00
Merge remote-tracking branches 'regmap/topic/noinc' and 'regmap/topic/single-rw' into regmap-next
2018-10-21 12:07:26 +01:00
remoteproc: Add mechanism for custom dump function assignment
2018-10-19 12:53:55 -07:00
reset: Grammar s/more then once/more than once/
2018-10-04 11:36:07 +02:00
rtc: move rtc_add_group/s definitions
2018-09-28 14:20:59 +02:00
net: sched: extend Qdisc with rcu
2018-09-25 20:17:35 -07:00
New gcc plugin: stackleak
2018-11-01 11:46:27 -07:00
seccomp: add a return code to trap to userspace
2018-12-11 16:28:41 -08:00
signal: Distinguish between kernel_siginfo and siginfo
2018-10-03 16:47:43 +02:00
Revert "serial:serial_core: Allow use of CTS for PPS line discipline"
2018-10-04 09:57:45 -07:00
Revert "serial: sh-sci: Remove SCIx_RZ_SCIFA_REGTYPE"
2018-10-02 14:38:02 -07:00
include/linux/signal.h: mark expected switch fall-throughs
2018-10-31 08:54:14 -07:00
signal: Use a smaller struct siginfo in the kernel
2018-10-03 16:50:39 +02:00
net: skbuff.h: Mark expected switch fall-throughs
2018-10-17 22:31:30 -07:00
bpf: sk_msg program helper bpf_msg_push_data
2018-10-20 21:37:11 +02:00
mm, slab/slub: introduce kmalloc-reclaimable caches
2018-10-26 16:26:31 -07:00
smp,cpumask: introduce on_each_cpu_cond_mask
2018-10-09 16:51:11 +02:00
init: add arch_call_rest_init to allow stack switching
2018-10-09 11:20:55 +02:00
lib: Add memcat_p(): paste 2 pointer arrays together
2018-10-11 12:12:55 +02:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2018-10-12 12:35:02 +02:00
Merge branch 'xarray' of git://git.infradead.org/users/willy/linux-dax
2018-10-28 11:35:40 -07:00
xarray: Replace exceptional entries
2018-09-29 22:47:49 -04:00
swiotlb: don't dip into swiotlb pool for coherent allocations
2018-10-19 08:48:28 +02:00
seccomp: switch system call argument type to void *
2018-12-11 16:28:41 -08:00
TC: Set DMA masks for devices
2018-10-11 09:16:44 -07:00
tcp: do not change tcp_wstamp_ns in tcp_mstamp_refresh
2018-10-15 22:56:41 -07:00
thunderbolt: Convert rest of the driver files to use SPDX identifier
2018-10-02 15:52:08 -07:00
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-10-25 11:14:36 -07:00
trace_uprobe: support reference counter in fd-based uprobe
2018-10-10 22:14:17 -04:00
tracepoint: Fix tracepoint array element size mismatch
2018-10-17 15:35:29 -04:00
tracepoint: Fix tracepoint array element size mismatch
2018-10-17 15:35:29 -04:00
change semantics of ldisc ->compat_ioctl()
2018-10-13 00:50:53 -04:00
iov_iter: Add I/O discard iterator
2018-10-24 00:41:07 +01:00
uio: introduce UIO_MEM_IOVA
2018-09-25 20:33:24 +02:00
umh: Add command line to user mode helpers
2018-10-22 19:37:36 -07:00
net/packet: fix packet drop as of virtio gso
2018-10-04 22:23:15 -07:00
scsi: sched/wait: Add wait_event_lock_irq_timeout for TASK_UNINTERRUPTIBLE usage
2018-10-16 00:11:13 -04:00
blkcg: revert blkcg cleanups series
2018-11-01 19:59:53 -06:00
xarray: Add range store functionality
2018-10-21 10:46:46 -04:00
