From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9E708C4332F for ; Wed, 14 Dec 2022 18:53:01 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id BE83B8E0003; Wed, 14 Dec 2022 13:53:00 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id B988D8E0002; Wed, 14 Dec 2022 13:53:00 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id A60BE8E0003; Wed, 14 Dec 2022 13:53:00 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id 98E4C8E0002 for ; Wed, 14 Dec 2022 13:53:00 -0500 (EST) Received: from smtpin02.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay05.hostedemail.com (Postfix) with ESMTP id 55CF640B66 for ; Wed, 14 Dec 2022 18:53:00 +0000 (UTC) X-FDA: 80241808920.02.3C62E3A Received: from mail-pf1-f175.google.com (mail-pf1-f175.google.com [209.85.210.175]) by imf09.hostedemail.com (Postfix) with ESMTP id A6496140016 for ; Wed, 14 Dec 2022 18:52:57 +0000 (UTC) Authentication-Results: imf09.hostedemail.com; dkim=pass header.d=chromium.org header.s=google header.b=bI1QN40V; spf=pass (imf09.hostedemail.com: domain of keescook@chromium.org designates 209.85.210.175 as permitted sender) smtp.mailfrom=keescook@chromium.org; dmarc=pass (policy=none) header.from=chromium.org ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1671043977; a=rsa-sha256; cv=none; b=YP5zqj6SPIOaSY/1tFjd1mQ1xMZ/juzTZqwBfHslPjLXvr0VzcIALxQWUvGrkT2CDQIZwS 5aFHL6VWaN/SmRDFGIv4DsaiF/0CCsCmAjuQ0s5VTSjKnEaWGJp1k5GkVV2tkrSlAfrvN5 XnkOtqBylli1WLgCIAR3cdVxsUap3z4= ARC-Authentication-Results: i=1; imf09.hostedemail.com; dkim=pass header.d=chromium.org header.s=google header.b=bI1QN40V; spf=pass (imf09.hostedemail.com: domain of keescook@chromium.org designates 209.85.210.175 as permitted sender) smtp.mailfrom=keescook@chromium.org; dmarc=pass (policy=none) header.from=chromium.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1671043977; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=3OH5piqQgYs2HTpmjsVvlC/zkWvQoKtSKrvl3IZUHZQ=; b=qlqrl9KRCUT7ic9vofcfO1Qbyud/5nJI7Fp8SXLVbAS5Plf6iWpRFkvAnToe2ZjEwCuYMq hhYn+rrr5e0UPvQVbdGfcY11LtwDrrIBdJakBvQqUOqGvIvxUCUpTgPeUj+rFSmv5xqSt4 JhCQt12PI2v4bahPsK5gTzBqfSqpopM= Received: by mail-pf1-f175.google.com with SMTP id k79so5110685pfd.7 for ; Wed, 14 Dec 2022 10:52:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=3OH5piqQgYs2HTpmjsVvlC/zkWvQoKtSKrvl3IZUHZQ=; b=bI1QN40VfMI5YffahIskXJ19TxDe1I9BCbHooK/Oq0RHU8deXnhE+Uzgfmwy9d4kI9 4l5UD0lWzsJh0Wh1y5ViJkI5rntsqx9KWbjNYwh6ih7fissYH/mdaOxsJXfbTnXWqtob pvxkFzZ/YnE344PU68pGDiTSvnfzuCbQUByWI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=3OH5piqQgYs2HTpmjsVvlC/zkWvQoKtSKrvl3IZUHZQ=; b=I3QGTF7hsdDS5rOsdIxbtHibLLL/h64XOXIB88v8XyNJbg6nqM7QcIpGINVLA1oeLk XAg0u19RsVG5C17HcAd+mDjLbhbZJkifqkApEcL+buPw37QEyoIkBNTqCWlD9gGobTqK JzCelCf+rfL1swqBjX77lKrKvCsPXbGztI+o2nBiIfbSqPL8uFSSQu/Th9a6ybJz4JOn +yBvxnfEpr7heHmIwTLKprykfU+k3Uvm7s1eV6Ozpz2wtCNfBlpW97T9p3Jurp0W8zBk OlT5b6hf47t6AMOUHC4LdUOv335LFWp8ouiMO9o08yNlHQrF2imoSOt3ZCuwn+49mquR RGpA== X-Gm-Message-State: ANoB5pkZ0ljyXNBiQ75PZN/qL4I7iMsHfBRvyJ08xwq0ocAnnT7pN0vX N0yOgQxCYjD6edKYu+PCt5RuTA== X-Google-Smtp-Source: AA0mqf65AEZDaIMr5dElxYb0kE1PXzokNGbweS278MyeHeqmjC2k8jXN/Ezzt8ghTuysEsp3KngeHQ== X-Received: by 2002:a62:3103:0:b0:576:14a4:b76a with SMTP id x3-20020a623103000000b0057614a4b76amr22717330pfx.34.1671043976432; Wed, 14 Dec 2022 10:52:56 -0800 (PST) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id a2-20020a624d02000000b00576d4d69909sm228569pfb.8.2022.12.14.10.52.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Dec 2022 10:52:55 -0800 (PST) Date: Wed, 14 Dec 2022 10:52:54 -0800 From: Kees Cook To: jeffxu@chromium.org Cc: skhan@linuxfoundation.org, akpm@linux-foundation.org, dmitry.torokhov@gmail.com, dverkamp@chromium.org, hughd@google.com, jeffxu@google.com, jorgelo@chromium.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-mm@kvack.org, jannh@google.com, linux-hardening@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [PATCH v7 2/6] selftests/memfd: add tests for F_SEAL_EXEC Message-ID: <202212141052.3B04BF6@keescook> References: <20221209160453.3246150-1-jeffxu@google.com> <20221209160453.3246150-3-jeffxu@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20221209160453.3246150-3-jeffxu@google.com> X-Rspam-User: X-Rspamd-Server: rspam03 X-Rspamd-Queue-Id: A6496140016 X-Stat-Signature: t9t6zacm7948cxtzxfg4rbfs3camsy43 X-HE-Tag: 1671043977-11824 X-HE-Meta: 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 vb4bLNCx yzAAol57HakzDMuYkn4oU8DZKagmQuVsT5LI1bna1Ngt3G0/89GDWyLIpqdOmAwhmDOEbtRxsu8juSjUAT31qvVKQEGAW64wMClKxICuoP8Mj7ipfHnV5dI347ncfkVpzj+GgPwT5CzsycLB8QTqkbqXfSNqtZVt0HDwt5uZnFBEZ9eNk3ITtNz4NOQY2vbalfhXAKq8GahhnuoETB3cI5vmakw== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000001, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Fri, Dec 09, 2022 at 04:04:49PM +0000, jeffxu@chromium.org wrote: > From: Daniel Verkamp > > Basic tests to ensure that user/group/other execute bits cannot be > changed after applying F_SEAL_EXEC to a memfd. > > Signed-off-by: Daniel Verkamp Reviewed-by: Kees Cook -- Kees Cook