From patchwork Tue Aug 21 00:04:41 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Schaufler, Casey" X-Patchwork-Id: 10571425 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 7338813B6 for ; Tue, 21 Aug 2018 12:15:17 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 6A43F29F7C for ; Tue, 21 Aug 2018 12:15:17 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 5E50D29FA0; Tue, 21 Aug 2018 12:15:17 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from uhil19pa10.eemsg.mail.mil (uhil19pa10.eemsg.mail.mil [214.24.21.83]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id ED8D229F7C for ; Tue, 21 Aug 2018 12:15:14 +0000 (UTC) Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by uhil19pa10.eemsg.mail.mil with ESMTP; 21 Aug 2018 12:15:13 +0000 X-IronPort-AV: E=Sophos;i="5.53,269,1531785600"; d="scan'208";a="15037534" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2AbBAAmAXxb/wHyM5BaHQEBBQELAYUgEhYSjFujaRSBWhcYFIg9NhYBAgEBAQEBAQIBbCiCNSSCXwMDAQIkExQgDgMJAQFACAgDAS0VEQcHCwUYBIMBggKmXTOKYIpwP4hvARIBhXcCjU0wjQgHAoICBI1SCxWOOZMzgUgIKWFxTSNQgmmCJReON099jB2COgEB Received: from tarius.tycho.ncsc.mil (HELO tarius.infosec.tycho.ncsc.mil) ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 21 Aug 2018 12:15:11 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus.infosec.tycho.ncsc.mil [192.168.25.40]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7LCF9hD023658; Tue, 21 Aug 2018 08:15:11 -0400 Received: from tarius.infosec.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w7L04mxQ033216 for ; Mon, 20 Aug 2018 20:04:48 -0400 Received: from goalie.tycho.ncsc.mil (goalie.infosec.tycho.ncsc.mil [144.51.242.250]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7L04laA014327 for ; Mon, 20 Aug 2018 20:04:48 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AbBgDBVntbfSNjr8ZdHgEGDIUxFhKYGJgkgXoLhGwCg00hNRcBAgEBAQEBAQIUAQEWOoVnAwMnYlFXBxKDIoICqGAzimSJGIFYP456Ao13jQUHAoIABI1RCxWOOJMogUMCM4FTTSODOYIlF443HzCPCwEB X-IPAS-Result: A1AbBgDBVntbfSNjr8ZdHgEGDIUxFhKYGJgkgXoLhGwCg00hNRcBAgEBAQEBAQIUAQEWOoVnAwMnYlFXBxKDIoICqGAzimSJGIFYP456Ao13jQUHAoIABI1RCxWOOJMogUMCM4FTTSODOYIlF443HzCPCwEB X-IronPort-AV: E=Sophos;i="5.53,267,1531800000"; d="scan'208";a="350581" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 20 Aug 2018 20:04:47 -0400 IronPort-PHdr: 9a23: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 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0GjBQDBVntbfSNjr8ZdHgEGDIUxFhKYGZgkgXoLhGwCg04hNRcBAgEBAQEBAQIBAQIQAQEWOi+CNSKCYgMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+OegKNd40FBwKCAASNUQsVjjiTKIFDAjOBVE0jgzmCJReONx8wjwsBAQ X-IPAS-Result: A0GjBQDBVntbfSNjr8ZdHgEGDIUxFhKYGZgkgXoLhGwCg04hNRcBAgEBAQEBAQIBAQIQAQEWOi+CNSKCYgMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+OegKNd40FBwKCAASNUQsVjjiTKIFDAjOBVE0jgzmCJReONx8wjwsBAQ X-IronPort-AV: E=Sophos;i="5.53,267,1531785600"; d="scan'208";a="7622027" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from fmsmga002-icc.fm.intel.com ([198.175.99.35]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Aug 2018 00:04:47 +0000 Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga002-icc.fm.intel.com with ESMTP; 20 Aug 2018 17:04:46 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.53,267,1531810800"; d="scan'208";a="250527768" Received: from cschaufl-mobl.amr.corp.intel.com ([10.252.136.122]) by orsmga005.jf.intel.com with ESMTP; 20 Aug 2018 17:04:46 -0700 From: Casey Schaufler To: kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, casey.schaufler@intel.com, dave.hansen@intel.com, deneen.t.dock@intel.com, kristen@linux.intel.com, arjan@linux.intel.com Date: Mon, 20 Aug 2018 17:04:41 -0700 Message-Id: <20180821000444.7004-3-casey.schaufler@intel.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20180821000444.7004-1-casey.schaufler@intel.com> References: <20180821000444.7004-1-casey.schaufler@intel.com> X-Mailman-Approved-At: Tue, 21 Aug 2018 08:10:45 -0400 Subject: [PATCH v3 2/5] X86: Support LSM determination of side-channel X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP When switching between tasks it may be necessary to set an indirect branch prediction barrier if the tasks are potentially vulnerable to side-channel attacks. This adds a call to security_task_safe_sidechannel so that security modules can weigh in on the decision. Signed-off-by: Casey Schaufler --- arch/x86/mm/tlb.c | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/arch/x86/mm/tlb.c b/arch/x86/mm/tlb.c index 6eb1f34c3c85..8714d4af06aa 100644 --- a/arch/x86/mm/tlb.c +++ b/arch/x86/mm/tlb.c @@ -7,6 +7,7 @@ #include #include #include +#include #include #include @@ -270,11 +271,14 @@ void switch_mm_irqs_off(struct mm_struct *prev, struct mm_struct *next, * threads. It will also not flush if we switch to idle * thread and back to the same process. It will flush if we * switch to a different non-dumpable process. + * If a security module thinks that the transition + * is unsafe do the flush. */ - if (tsk && tsk->mm && - tsk->mm->context.ctx_id != last_ctx_id && - get_dumpable(tsk->mm) != SUID_DUMP_USER) - indirect_branch_prediction_barrier(); + if (tsk && tsk->mm && tsk->mm->context.ctx_id != last_ctx_id) { + if (get_dumpable(tsk->mm) != SUID_DUMP_USER || + security_task_safe_sidechannel(tsk) != 0) + indirect_branch_prediction_barrier(); + } if (IS_ENABLED(CONFIG_VMAP_STACK)) { /*