util/misc: support kernels where MFD_NOEXEC_SEAL does not enable sealing
#366
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pobrn
force-pushed
the
kernel_noexec_noimply_allowseal
branch
from
0030cff
to
9bd6489
Compare
dvdhrm
requested changes
May 23, 2024
|
(I can also amend the changes myself when applying the patch. Let me know!) |
…aling Newer Linux kernels do not unset `F_SEAL_SEAL` when `MFD_NOEXEC_SEAL` is supplied to `memfd_create()`[0]. Currently, `misc_memfd()` has a workaround for this peculiarity of the kernel, however, this workaround will break. Avoid the breakage by checking if the kernel added `F_SEAL_SEAL`, and only try to add it if it is not already present. Note that this kernel uAPI change does not affect dbus-broker's normal operations since it never attempts to create a memfd with `MFD_NOEXEC_SEAL` and without `MFD_ALLOW_SEALING`. Only the test suite would be broken on newer kernels without this change. [0]: https://lore.kernel.org/linux-mm/[email protected]/
pobrn
force-pushed
the
kernel_noexec_noimply_allowseal
branch
from
9bd6489
to
6ac40fa
Compare
Merged
|
I have not seen the force-push, sorry for missing that. I adjusted the PR to keep the 80ch comment line limit and added minor memfd adjustments as add-on commits. The roll-up PR is pending as #371, so I am closing this one. Thanks a lot for pushing this forward! I still hope we can get the kernel side fixed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I am trying to squash the kernel's peculiar behaviour of implicitly enabling sealing on
MFD_NOEXEC_SEAL.dbus-brokeris one of the affected programs, but as noted below, only the test suite would break, normal operations wouldn't. At least as far as I can tell.Newer Linux kernels do not unset
F_SEAL_SEALwhenMFD_NOEXEC_SEALis supplied tomemfd_create(). Currently,misc_memfd()has a workaround for this peculiarity of the kernel, however, this workaround will break.Avoid the breakage by checking if the kernel added
F_SEAL_SEAL, and only try to add it if it is not already present.Note that this kernel uAPI change does not affect dbus-broker's normal operations since it never attempts to create a memfd with
MFD_NOEXEC_SEALand withoutMFD_ALLOW_SEALING. Only the test suite would be broken on newer kernels without this change.v2: https://lore.kernel.org/linux-mm/[email protected]/
v1: https://lore.kernel.org/linux-mm/[email protected]/