Dan Rosenberg 455cd5ab30
kptr_restrict for hiding kernel pointers from unprivileged users ...
Add the %pK printk format specifier and the /proc/sys/kernel/kptr_restrict
sysctl.
The %pK format specifier is designed to hide exposed kernel pointers,
specifically via /proc interfaces. Exposing these pointers provides an
easy target for kernel write vulnerabilities, since they reveal the
locations of writable structures containing easily triggerable function
pointers. The behavior of %pK depends on the kptr_restrict sysctl.
If kptr_restrict is set to 0, no deviation from the standard %p behavior
occurs. If kptr_restrict is set to 1, the default, if the current user
(intended to be a reader via seq_printf(), etc.) does not have CAP_SYSLOG
(currently in the LSM tree), kernel pointers using %pK are printed as 0's.
If kptr_restrict is set to 2, kernel pointers using %pK are printed as
0's regardless of privileges. Replacing with 0's was chosen over the
default "(null)", which cannot be parsed by userland %p, which expects
"(nil)".
[akpm@linux-foundation.org: check for IRQ context when !kptr_restrict, save an indent level, s/WARN/WARN_ONCE/]
[akpm@linux-foundation.org: coding-style fixup]
[randy.dunlap@oracle.com: fix kernel/sysctl.c warning]
Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Randy Dunlap <randy.dunlap@oracle.com>
Cc: James Morris <jmorris@namei.org>
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: Thomas Graf <tgraf@infradead.org>
Cc: Eugene Teo <eugeneteo@kernel.org>
Cc: Kees Cook <kees.cook@canonical.com>
Cc: Ingo Molnar <mingo@elte.hu>
Cc: David S. Miller <davem@davemloft.net>
Cc: Peter Zijlstra <a.p.zijlstra@chello.nl>
Cc: Eric Paris <eparis@parisplace.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-01-13 08:03:08 -08:00
2011-01-06 22:32:52 +00:00
2010-12-17 09:54:40 -08:00
2011-01-09 09:10:10 -08:00
2011-01-07 14:45:47 -08:00
2010-12-16 12:37:26 -05:00
2011-01-08 23:52:30 -05:00
2010-10-26 17:54:22 -07:00
2011-01-08 23:52:24 -05:00
2010-10-30 08:31:35 -07:00
2011-01-10 20:11:38 +01:00
2010-10-28 22:40:31 +01:00
2011-01-07 17:08:46 -08:00
2010-12-26 22:37:05 -08:00
2011-01-11 15:11:56 -08:00
2011-01-13 08:03:08 -08:00
2011-01-07 13:16:28 -08:00
2010-12-11 01:28:58 -05:00
2010-11-23 20:14:46 +00:00
2010-12-10 15:45:05 -08:00
2010-11-12 07:55:30 -08:00
2011-01-10 08:51:44 -08:00
2010-12-06 15:58:43 -05:00
2010-10-26 16:52:10 -07:00
2010-10-27 18:03:06 -07:00
2011-01-10 13:31:14 -08:00
2010-11-30 17:56:38 -08:00
2010-11-10 14:54:09 +01:00
2011-01-07 17:50:31 +11:00
2010-11-15 13:27:04 -05:00
2010-11-10 14:54:09 +01:00
2010-12-17 08:36:01 +01:00
2010-12-13 16:11:13 -08:00
2010-11-29 08:35:12 +11:00
2010-10-27 18:03:09 -07:00
2010-11-26 10:51:04 +00:00
2010-12-20 09:07:35 -08:00
2011-01-07 17:50:29 +11:00
2011-01-05 14:15:50 +01:00
2010-12-16 16:15:34 -08:00
2010-11-10 16:57:11 -08:00
2010-11-30 13:39:55 +00:00
2011-01-10 07:38:53 -08:00
2010-12-31 10:50:54 -08:00
2010-12-07 13:47:12 +01:00
2011-01-10 08:51:44 -08:00
2011-01-10 16:10:33 -08:00
2011-01-03 01:41:40 -08:00
2010-11-26 09:57:36 +01:00
2011-01-07 23:36:59 -05:00
2010-12-17 15:07:19 +01:00
2011-01-10 16:05:30 -08:00
2010-12-10 15:55:23 -08:00
2011-01-10 19:04:07 +01:00
2010-12-15 13:56:33 -05:00
2010-12-22 12:56:10 +09:00
2011-01-09 15:42:55 -08:00
2010-12-08 10:30:34 -08:00
2011-01-04 08:48:34 +01:00
2011-01-10 08:51:44 -08:00
2010-11-30 17:28:57 -05:00
2011-01-07 17:50:27 +11:00
2011-01-10 08:51:44 -08:00
2010-11-15 13:49:51 +09:00
2011-01-07 17:50:23 +11:00
2011-01-07 17:50:23 +11:00
2010-11-19 10:18:47 -05:00
2010-12-07 20:16:56 +01:00
2011-01-07 17:50:29 +11:00
2010-12-06 23:52:08 +01:00
2010-12-06 17:15:15 -08:00
2011-01-10 22:11:23 +01:00
2010-11-18 10:56:29 -08:00
2010-12-10 15:10:38 +01:00
2010-12-17 15:18:04 +01:00
2011-01-10 07:38:53 -08:00
2010-11-12 14:51:55 +01:00
2010-11-15 22:40:38 +01:00
2010-11-09 09:31:10 -08:00
2011-01-10 22:11:23 +01:00
2010-10-26 17:40:56 -07:00
2010-12-20 14:49:47 -05:00
2011-01-11 23:55:51 +01:00
2011-01-06 11:10:05 -08:00
2010-11-22 08:24:29 -08:00
2010-11-16 10:58:30 -08:00
2010-11-12 12:30:57 -08:00
2011-01-04 11:29:52 -08:00
2010-12-06 12:59:05 -08:00
2011-01-06 10:23:33 -08:00
2011-01-07 14:45:47 -08:00
2010-11-10 10:21:22 +01:00
2010-10-26 16:52:08 -07:00
2010-11-11 13:40:11 +01:00
2010-12-17 10:01:09 -08:00
2010-11-24 11:16:42 -08:00
2010-10-26 10:33:27 +02:00
2010-10-28 11:58:39 +02:00
2011-01-10 12:29:43 -05:00
2010-12-09 20:17:07 -08:00
2010-10-29 14:45:29 -04:00
2011-01-10 08:27:52 -08:00
2010-12-17 15:07:19 +01:00
2011-01-13 08:03:07 -08:00
2010-10-27 18:03:18 -07:00
2010-10-29 13:14:41 -05:00
2011-01-13 08:03:07 -08:00
2011-01-07 17:02:58 -08:00
2010-11-22 13:25:13 +10:00
2010-12-22 10:27:53 +01:00
2011-01-13 08:03:06 -08:00
2011-01-13 08:03:05 -08:00
2010-11-12 07:55:32 -08:00
2011-01-05 19:43:22 -05:00
2011-01-07 17:50:31 +11:00
2010-10-25 21:24:15 -04:00
2010-10-28 09:08:47 -05:00
2010-11-22 08:34:23 -08:00
2010-10-26 16:52:19 -07:00
2011-01-10 19:04:08 +01:00
2010-12-06 11:03:46 -08:00
2010-12-02 14:51:15 -08:00
2010-10-26 16:52:05 -07:00
2010-10-26 16:52:09 -07:00
2010-10-28 09:02:15 -07:00
2010-10-26 16:52:07 -07:00
2010-12-23 09:48:41 +01:00
2010-10-26 16:52:13 -07:00
2011-01-07 17:50:33 +11:00
2010-11-26 15:05:34 +01:00
2011-01-07 17:50:27 +11:00
2011-01-07 17:50:19 +11:00
2011-01-07 17:50:26 +11:00
2011-01-10 16:05:30 -08:00
2010-11-17 10:54:34 -08:00
2010-12-17 12:03:14 -08:00
2010-12-16 12:37:23 -05:00
2011-01-11 14:17:09 -05:00
2011-01-06 14:57:46 -05:00
2011-01-07 17:50:29 +11:00
2010-12-07 23:02:44 -05:00
2011-01-06 16:03:13 -05:00
2010-12-20 14:49:47 -05:00
2010-12-22 22:15:32 +01:00
2010-11-10 16:57:11 -08:00
2010-12-23 15:57:48 -07:00
2011-01-08 21:42:42 -07:00
2010-11-01 01:08:14 -04:00
2010-11-25 06:50:40 +09:00
2010-10-26 16:52:05 -07:00
2010-10-26 16:52:09 -07:00
2011-01-07 17:50:33 +11:00
2011-01-11 11:11:46 -08:00
2010-10-27 21:30:13 -04:00
2010-10-27 17:53:25 +02:00
2010-12-18 15:54:04 +01:00
2010-12-16 11:36:43 +01:00
2011-01-10 07:38:54 -08:00
2010-12-24 15:04:06 +01:00
2010-12-24 15:04:41 +01:00
2010-10-27 18:03:18 -07:00
2011-01-07 17:50:29 +11:00
2011-01-13 08:03:08 -08:00
2010-10-27 18:03:10 -07:00
2010-11-12 07:55:33 -08:00
2010-12-02 17:55:12 +01:00
2011-01-10 19:04:05 +01:00
2010-11-12 07:55:32 -08:00
2010-10-29 04:16:31 -04:00
2010-10-27 18:03:18 -07:00
2010-11-29 11:17:22 -08:00
2010-10-26 16:52:16 -07:00
2011-01-07 17:50:31 +11:00
2010-12-17 12:34:59 -08:00
2010-12-17 12:34:08 -08:00
2010-11-29 22:01:58 -08:00
2010-11-29 22:01:58 -08:00
2010-11-17 08:59:32 -08:00
2011-01-07 17:50:29 +11:00
2010-11-12 07:55:30 -08:00
2010-11-15 13:24:06 -05:00
2010-10-27 18:03:16 -07:00
2010-10-27 18:03:16 -07:00
2010-10-27 18:03:16 -07:00
2010-10-26 16:52:09 -07:00
2010-12-13 22:48:21 +01:00
2010-11-15 11:29:30 -08:00
2011-01-10 08:51:44 -08:00
2011-01-10 09:46:24 +11:00
2010-10-30 12:12:50 +02:00
2011-01-07 17:50:27 +11:00
2010-12-16 13:14:32 -08:00
2010-11-30 14:11:49 -08:00
2010-11-09 14:45:52 +01:00
2010-11-15 18:48:25 +09:00
2010-11-09 16:38:20 +09:00
2010-10-31 10:40:39 -04:00
2010-12-16 14:43:14 -08:00
2010-11-28 21:16:28 +02:00
2011-01-07 17:50:16 +11:00
2010-11-06 09:04:33 +02:00
2010-11-17 14:58:36 -08:00
2010-10-27 17:28:36 +01:00
2010-12-08 12:16:33 -08:00
2011-01-06 11:41:42 -08:00
2011-01-10 12:00:22 -05:00
2010-11-18 14:37:34 +01:00
2010-11-24 11:14:24 -08:00
2010-12-24 15:02:42 +01:00
2010-10-26 16:52:05 -07:00
2010-10-27 18:03:14 -07:00
2010-11-18 14:37:45 +01:00
2010-12-22 19:43:34 -08:00
2010-12-11 12:34:34 +01:00
2011-01-01 13:57:56 -08:00
2011-01-01 13:57:56 -08:00
2011-01-13 08:03:08 -08:00
2010-11-29 08:55:25 +11:00
2010-11-29 08:55:22 +11:00
2010-10-27 18:03:12 -07:00
2011-01-07 20:57:22 -05:00
2010-12-16 13:14:32 -08:00
2010-12-02 12:58:16 -08:00
2010-10-26 16:52:03 -07:00
2010-12-20 09:37:33 +01:00
2010-11-10 16:57:11 -08:00
2010-12-16 10:05:06 -08:00
2011-01-06 13:05:04 +10:00
2010-11-10 12:04:41 +09:00
2010-12-11 02:01:35 -05:00
2010-10-27 18:03:18 -07:00
2010-12-02 14:51:15 -08:00
2010-11-15 13:25:02 -05:00
2011-01-07 16:58:04 -08:00
2010-10-30 09:05:48 -07:00
2010-12-07 14:04:02 -08:00
2010-12-10 14:43:58 -08:00
455cd5ab30