Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1591674

Re: [RFC] arm64: support HAVE_ARCH_RARE_WRITE

Show all headers | View raw

On Thu, Mar 2, 2017 at 7:00 AM, Hoeun Ryu <hoeun.ryu@gmail.com> wrote:
>  This RFC is a quick and dirty arm64 implementation for Kees Cook's RFC for
> rare_write infrastructure [1].

Awesome! :)

>  This implementation is based on Mark Rutland's suggestions, which is that
> a special userspace mm that maps only __start/end_rodata as RW permission
> is prepared during early boot time (paging_init) and __arch_rare_write_map()
> switches to the mm [2].
>
>  Due to the limit of implementation (the mm having RW mapping is userspace
> mm), we need a new arch-specific __arch_rare_write_ptr() to convert RO
> address to RW address (CONFIG_HAVE_RARE_WRITE_PTR is added), which is
> general for all architectures (__rare_write_ptr()) in Kees's RFC . So all
> writes should be instrumented by __rare_write().

Cool, yeah, I'll get all this fixed up in my next version.

>  One caveat for arm64 is CONFIG_ARM64_SW_TTBR0_PAN.
> Because __arch_rare_write_map() installes a special user mm to ttbr0,
> usercopy inside  __arch_rare_write_map/unmap() pair will break rare_write.
> (uaccess_enable() replaces the special mm and RW alias is no longer valid.)

That's totally fine constraint: this case should never happen for so
many reasons. :)

>  A similar problem could rise in general usercopy inside
> __arch_rare_write_map/unmap(). __arch_rare_write_map() replaces current->mm,
> so we loose the address space of the `current` process.
>
> It passes LKDTM's rare write test.
>
> [1] : http://www.openwall.com/lists/kernel-hardening/2017/02/27/5
> [2] : https://lkml.org/lkml/2017/2/22/254
>
> Signed-off-by: Hoeun Ryu <hoeun.ryu@gmail.com>

-Kees

-- 
Kees Cook
Pixel Security

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[RFC] arm64: support HAVE_ARCH_RARE_WRITE Hoeun Ryu <hoeun.ryu@gmail.com> - 2017-03-02 16:10 +0100
  Re: [RFC] arm64: support HAVE_ARCH_RARE_WRITE Kees Cook <keescook@chromium.org> - 2017-03-03 07:00 +0100
    Re: [RFC] arm64: support HAVE_ARCH_RARE_WRITE Hoeun Ryu <hoeun.ryu@gmail.com> - 2017-03-04 07:00 +0100
  Re: [RFC] arm64: support HAVE_ARCH_RARE_WRITE Andy Lutomirski <luto@amacapital.net> - 2017-03-03 22:00 +0100
    Re: [RFC] arm64: support HAVE_ARCH_RARE_WRITE Hoeun Ryu <hoeun.ryu@gmail.com> - 2017-03-04 07:10 +0100

csiph-web