From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 73F6DC77B75 for ; Tue, 16 May 2023 22:30:55 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id DC9BD900004; Tue, 16 May 2023 18:30:54 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id D7A0D900002; Tue, 16 May 2023 18:30:54 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id C41C5900004; Tue, 16 May 2023 18:30:54 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0017.hostedemail.com [216.40.44.17]) by kanga.kvack.org (Postfix) with ESMTP id B7870900002 for ; Tue, 16 May 2023 18:30:54 -0400 (EDT) Received: from smtpin30.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay09.hostedemail.com (Postfix) with ESMTP id 7F4EE80373 for ; Tue, 16 May 2023 22:30:54 +0000 (UTC) X-FDA: 80797564428.30.3D8B4C3 Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by imf08.hostedemail.com (Postfix) with ESMTP id 4383F160016 for ; Tue, 16 May 2023 22:30:52 +0000 (UTC) Authentication-Results: imf08.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b=Skh8XZh2; spf=pass (imf08.hostedemail.com: domain of dave.hansen@intel.com designates 134.134.136.20 as permitted sender) smtp.mailfrom=dave.hansen@intel.com; dmarc=pass (policy=none) header.from=intel.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1684276252; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=VJlRw0cVqZbnlLBS7pOMQzrAmvHSD2FA3uV2tmyOarg=; b=Mdbfd4G1IIna+ZsY5Bxr5PXOr85Ttpt8VmChuldoBp80x6RF+TuYPNiZF3gnunp/ZuzxV9 nPl9sGvrVMIHEFudEmbTJ15XInqkt3Bl9m8c7cKjkFVFlesGuYxBsxJbL5D2jXvfq6FilL H1UrXW/Ds7ycjYJ1zmkEp7TIyNCWiS8= ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1684276252; a=rsa-sha256; cv=none; b=yrOHFOlI8D5c/5w/morFKP+wywGFmGzyR2sSp6sqo2yK75NNklKEcEQdR4Ad7lkCQm5oTV oSQ8QeGrcvGYSGGLxOjOXUa+tI/o6eTuw+r7w6f8uOgtjkIc5svwH4O1DvlANneOd95Dy/ auRUbrP+6M/4/D1y0iieWkFnRQP8c5w= ARC-Authentication-Results: i=1; imf08.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b=Skh8XZh2; spf=pass (imf08.hostedemail.com: domain of dave.hansen@intel.com designates 134.134.136.20 as permitted sender) smtp.mailfrom=dave.hansen@intel.com; dmarc=pass (policy=none) header.from=intel.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1684276252; x=1715812252; h=message-id:date:mime-version:subject:to:cc:references: from:in-reply-to:content-transfer-encoding; bh=VJlRw0cVqZbnlLBS7pOMQzrAmvHSD2FA3uV2tmyOarg=; b=Skh8XZh2iTW5g95z0xLibEVRXHO96oHIP4lMxiGKVbS+BK6xRABLLWrb Vrp55ivSniWTWLJ+r+FMORF16CtqE8QOFDrceNTdf7DULVdgBJ6/BYOi5 dOnext5r9K+CvnfJ3E/IlJ0iejSVBjSr3yOw2ktdUfn7OukahQbSHjUH7 7Bobp7/FgGRuUAW8vGJn8N/kzz4ryMpvplVD0/8EdPLC8lHaOO6eo3AsJ bDtnMfigH7aqjZ6fPWFgyDgXh4qZfh7qfHpYWh1b7S+h1YF3YpHpm/Ih1 TH+h627EO8s5qqP43FlwlLDNeXOaEFKy2EHYdzSqc1eCVn5ia+aLlZKuJ w==; X-IronPort-AV: E=McAfee;i="6600,9927,10712"; a="340986805" X-IronPort-AV: E=Sophos;i="5.99,280,1677571200"; d="scan'208";a="340986805" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 16 May 2023 15:30:50 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6600,9927,10712"; a="695636016" X-IronPort-AV: E=Sophos;i="5.99,280,1677571200"; d="scan'208";a="695636016" Received: from mtpanu-mobl1.amr.corp.intel.com (HELO [10.212.203.6]) ([10.212.203.6]) by orsmga007-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 16 May 2023 15:30:50 -0700 Message-ID: <1656e926-f277-710e-71ad-1ff2fe77886b@intel.com> Date: Tue, 16 May 2023 15:30:50 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: [PATCH 0/6] Memory Mapping (VMA) protection using PKU - set 1 Content-Language: en-US To: Jeff Xu , Kees Cook Cc: jeffxu@chromium.org, luto@kernel.org, jorgelo@chromium.org, groeck@chromium.org, jannh@google.com, sroettger@google.com, akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-mm@kvack.org, linux-hardening@vger.kernel.org References: <20230515130553.2311248-1-jeffxu@chromium.org> <202305161307.4A16BB6A47@keescook> From: Dave Hansen In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4383F160016 X-Stat-Signature: 548bysfys1udg9f16c6k6szmhk8aw7xb X-Rspam-User: X-Rspamd-Server: rspam09 X-HE-Tag: 1684276252-144471 X-HE-Meta: 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 /inL+wuC UI2dIryiHU+kZSnmuT1Zgrf1qXY8rkOzy7uIHSjzP4xEBNUQcuJRsi8vDOi7Ck0gIS2hvIwsuo1rQxJxCh/+aI+uznslRSokSB+U8NlCsuAW/oz52v2KozO46s4h9mjeBOfgHT9388WdJx4tTiKFiJwVNKA== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On 5/16/23 15:17, Jeff Xu wrote: >>> This set of patch covers mprotect/munmap, I plan to work on other >>> syscalls after this. >> Which ones are on your list currently? >> > mprotect/mprotect_pkey/munmap > mmap/mremap > madvice,brk,sbrk What about pkey_free()? Without that, someone can presumably free the pkey and then reallocate it without PKEY_ENFORCE_API.