From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5FF4DC433DF for ; Wed, 20 May 2020 16:53:09 +0000 (UTC) Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id E11CA20671 for ; Wed, 20 May 2020 16:53:08 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org E11CA20671 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=zeniv.linux.org.uk Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=ksummit-discuss-bounces@lists.linuxfoundation.org Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id B0F7886F50; Wed, 20 May 2020 16:53:08 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PETOVjBylCO; Wed, 20 May 2020 16:53:06 +0000 (UTC) Received: from lists.linuxfoundation.org (lf-lists.osuosl.org [140.211.9.56]) by fraxinus.osuosl.org (Postfix) with ESMTP id A26C286E23; Wed, 20 May 2020 16:53:06 +0000 (UTC) Received: from lf-lists.osuosl.org (localhost [127.0.0.1]) by lists.linuxfoundation.org (Postfix) with ESMTP id 6F60EC088A; Wed, 20 May 2020 16:53:06 +0000 (UTC) Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) by lists.linuxfoundation.org (Postfix) with ESMTP id 417E0C0176 for ; Wed, 20 May 2020 16:53:04 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id 3DCA586E23 for ; Wed, 20 May 2020 16:53:04 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BLKITKWYZaOZ for ; Wed, 20 May 2020 16:53:03 +0000 (UTC) X-Greylist: delayed 00:21:56 by SQLgrey-1.7.6 Received: from ZenIV.linux.org.uk (zeniv.linux.org.uk [195.92.253.2]) by fraxinus.osuosl.org (Postfix) with ESMTPS id E1A9A85E13 for ; Wed, 20 May 2020 16:53:02 +0000 (UTC) Received: from viro by ZenIV.linux.org.uk with local (Exim 4.93 #3 (Red Hat Linux)) id 1jbRcV-00CUxh-0b; Wed, 20 May 2020 16:31:03 +0000 Date: Wed, 20 May 2020 17:31:02 +0100 From: Al Viro To: Kees Cook Message-ID: <20200520163102.GZ23230@ZenIV.linux.org.uk> References: <202005200917.71E6A5B20@keescook> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <202005200917.71E6A5B20@keescook> Cc: ksummit-discuss@lists.linuxfoundation.org Subject: Re: [Ksummit-discuss] [TECH TOPIC] seccomp feature development X-BeenThere: ksummit-discuss@lists.linuxfoundation.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ksummit-discuss-bounces@lists.linuxfoundation.org Sender: "Ksummit-discuss" On Wed, May 20, 2020 at 09:17:41AM -0700, Kees Cook wrote: > As recently outlined[1], there are are a number of seccomp topics that > need discussion: > > - fd passing > - deep argument inspection > - changing structure sizes > - syscall bitmasks > > Specifically, seccomp needs to grow the ability to inspect Extensible > Argument syscalls, which requires that it inspect userspace memory > without Time-of-Check/Time-of-Use races and without double-copying. > Additionally, since the structures can grow and be nested, there needs > to be a way to ... catch and kill the bullshit ABI "enhancements" that would attempt that kind of garbage. I'm not sure why that is seccomp-related, though... _______________________________________________ Ksummit-discuss mailing list Ksummit-discuss@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/ksummit-discuss