From patchwork Mon Jun 5 03:47:52 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Jason A. Donenfeld" X-Patchwork-Id: 9765393 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id E655C60393 for ; Mon, 5 Jun 2017 03:48:56 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D75DB26E69 for ; Mon, 5 Jun 2017 03:48:56 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id CC49027F9F; Mon, 5 Jun 2017 03:48:56 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.1 required=2.0 tests=BAYES_00,DKIM_SIGNED, RCVD_IN_DNSWL_MED,T_DKIM_INVALID autolearn=ham version=3.3.1 Received: from mother.openwall.net (mother.openwall.net [195.42.179.200]) by mail.wl.linuxfoundation.org (Postfix) with SMTP id 0860426E69 for ; Mon, 5 Jun 2017 03:48:55 +0000 (UTC) Received: (qmail 7793 invoked by uid 550); 5 Jun 2017 03:48:42 -0000 Mailing-List: contact kernel-hardening-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Delivered-To: mailing list kernel-hardening@lists.openwall.com Received: (qmail 7211 invoked from network); 5 Jun 2017 03:48:37 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=zx2c4.com; h=from:to:cc :subject:date:message-id:in-reply-to:references; s=mail; bh=GRxA CeWe262M0gxylkDfHHdzKxs=; b=EyzMdIFD6941N78uGt9Wta7s+FX015j1mGBx e0GLynjLtSxwGo6Bpn9t+6NA1E+KbkRMGeITEnKcFLRIglfKbpSa2fZHJaq2qCBs aBOmi/RqEt3bjQ192oW570bHiUL/9zlYZtGmBid3QQAy+N0M+YHJ8AuB8/j6cbIl +RuOx0rT4laWkSceuKMcnssDRZTdvBjbXIOiuPXZ02XW91y8UCaWOZulJGeQcwzS Ea1hP/Dc2XdbmySeDuYXuZGs6rVYdBGyO7dMkmmPcSDWXZNu36XyKjWWOwQ8RnP4 UcnFQU2Pdk8rethhHPM3x6QcqWYuwKpNUAqHW4Zinc0i+aYl9A== From: "Jason A. Donenfeld" To: Theodore Ts'o , Linux Crypto Mailing List , LKML , kernel-hardening@lists.openwall.com, Greg Kroah-Hartman Cc: "Jason A. Donenfeld" Date: Mon, 5 Jun 2017 05:47:52 +0200 Message-Id: <20170605034757.4803-4-Jason@zx2c4.com> X-Mailer: git-send-email 2.13.0 In-Reply-To: <20170605034757.4803-1-Jason@zx2c4.com> References: <20170605034757.4803-1-Jason@zx2c4.com> Subject: [kernel-hardening] [PATCH RFC v2 3/8] random: warn when kernel uses unseeded randomness X-Virus-Scanned: ClamAV using ClamSMTP This enables an important dmesg notification about when drivers have used the crng without it being seeded first. Prior, these errors would occur silently, and so there hasn't been a great way of diagnosing these types of bugs for obscure setups. By adding this as a config option, we can leave it on by default, so that we learn where these issues happen, in the field, will still allowing some people to turn it off, if they really know what they're doing and do not want the log entries. Signed-off-by: Jason A. Donenfeld --- drivers/char/random.c | 3 +-- lib/Kconfig.debug | 15 +++++++++++++++ 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/drivers/char/random.c b/drivers/char/random.c index 035a5d7c06bd..9320b04235ae 100644 --- a/drivers/char/random.c +++ b/drivers/char/random.c @@ -285,7 +285,6 @@ #define SEC_XFER_SIZE 512 #define EXTRACT_SIZE 10 -#define DEBUG_RANDOM_BOOT 0 #define LONGS(x) (((x) + sizeof(unsigned long) - 1)/sizeof(unsigned long)) @@ -1470,7 +1469,7 @@ void get_random_bytes(void *buf, int nbytes) { __u8 tmp[CHACHA20_BLOCK_SIZE]; -#if DEBUG_RANDOM_BOOT > 0 +#ifdef CONFIG_WARN_UNSEEDED_RANDOM if (!crng_ready()) printk(KERN_NOTICE "random: %pF get_random_bytes called " "with crng_init = %d\n", (void *) _RET_IP_, crng_init); diff --git a/lib/Kconfig.debug b/lib/Kconfig.debug index e4587ebe52c7..fd5e67bcd46c 100644 --- a/lib/Kconfig.debug +++ b/lib/Kconfig.debug @@ -1209,6 +1209,21 @@ config STACKTRACE It is also used by various kernel debugging features that require stack trace generation. +config WARN_UNSEEDED_RANDOM + bool "Warn when kernel uses unseeded randomness" + default y + help + Some parts of the kernel contain bugs relating to their use of + cryptographically secure random numbers before it's actually possible + to generate those numbers securely. This setting ensures that these + flaws don't go unnoticed, by enabling a message, should this ever + occur. This will allow people with obscure setups to know when things + are going wrong, so that they might contact developers about fixing + it. + + Say Y here, unless you simply do not care about using unseeded + randomness and do not want a potential warning message in your logs. + config DEBUG_KOBJECT bool "kobject debugging" depends on DEBUG_KERNEL