From patchwork Tue Aug 21 00:04:43 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Schaufler, Casey" X-Patchwork-Id: 10571421 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id D3E44921 for ; Tue, 21 Aug 2018 12:15:01 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id BE16429F7C for ; Tue, 21 Aug 2018 12:15:01 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id B221829F9E; Tue, 21 Aug 2018 12:15:01 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from upbd19pa08.eemsg.mail.mil (upbd19pa08.eemsg.mail.mil [214.24.27.83]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 18A1129F7C for ; Tue, 21 Aug 2018 12:14:58 +0000 (UTC) Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by upbd19pa08.eemsg.mail.mil with ESMTP; 21 Aug 2018 12:14:57 +0000 X-IronPort-AV: E=Sophos;i="5.53,269,1531785600"; d="scan'208";a="15037493" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2CFAwAmAXxb/wHyM5BaHAEBAQQBAQoBAYUgEhYSjFuORZU4gVoXGBSIPTgUAQIBAQEBAQECAWwogjUkgl8DAwECJBMUIA4DCQEBQAgIAwEtFREHBwsFGASDAYICpl0zimCKcD+BEoJdhQABEgGFdwKNTTCNCAcCggIEjVILFYE+hyeFVJMzgVghYXFNI1CCaYIlF443T32MHYI6AQE Received: from tarius.tycho.ncsc.mil (HELO tarius.infosec.tycho.ncsc.mil) ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 21 Aug 2018 12:14:56 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus.infosec.tycho.ncsc.mil [192.168.25.40]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7LCEqAR023632; Tue, 21 Aug 2018 08:14:54 -0400 Received: from tarius.infosec.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w7L04n4i033218 for ; Mon, 20 Aug 2018 20:04:49 -0400 Received: from goalie.tycho.ncsc.mil (goalie.infosec.tycho.ncsc.mil [144.51.242.250]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7L04mkW014331 for ; Mon, 20 Aug 2018 20:04:48 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AcBgDBVntbfSNjr8ZdHgEGDIUxFhKYGIMFlxkLhGwCg00hNxUBAgEBAQEBAQIUAQEWOoVnAwMnYlFXBxKDIoICqGAzimSJGIFYP4ESgl2LCwKNd40FBwKCAASNUQsVgT6HJ4VTkyiBVyGBU00jgzmCJReONx8wjwsBAQ X-IPAS-Result: A1AcBgDBVntbfSNjr8ZdHgEGDIUxFhKYGIMFlxkLhGwCg00hNxUBAgEBAQEBAQIUAQEWOoVnAwMnYlFXBxKDIoICqGAzimSJGIFYP4ESgl2LCwKNd40FBwKCAASNUQsVgT6HJ4VTkyiBVyGBU00jgzmCJReONx8wjwsBAQ X-IronPort-AV: E=Sophos;i="5.53,267,1531800000"; d="scan'208";a="350583" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 20 Aug 2018 20:04:48 -0400 IronPort-PHdr: 9a23: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 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0GlBQDBVntbfSNjr8ZdHgEGDIUxFhKYGYMFlxkLhGwCg04hNxUBAgEBAQEBAQIBAQIQAQEWOi+CNSKCYgMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+BEoJdiwsCjXeNBQcCggAEjVELFYE+hyeFU5MogVchgVRNI4M5giUXjjcfMI8LAQE X-IPAS-Result: A0GlBQDBVntbfSNjr8ZdHgEGDIUxFhKYGYMFlxkLhGwCg04hNxUBAgEBAQEBAQIBAQIQAQEWOi+CNSKCYgMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+BEoJdiwsCjXeNBQcCggAEjVELFYE+hyeFU5MogVchgVRNI4M5giUXjjcfMI8LAQE X-IronPort-AV: E=Sophos;i="5.53,267,1531785600"; d="scan'208";a="7622029" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from fmsmga002-icc.fm.intel.com ([198.175.99.35]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Aug 2018 00:04:48 +0000 Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga002-icc.fm.intel.com with ESMTP; 20 Aug 2018 17:04:47 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.53,267,1531810800"; d="scan'208";a="250527793" Received: from cschaufl-mobl.amr.corp.intel.com ([10.252.136.122]) by orsmga005.jf.intel.com with ESMTP; 20 Aug 2018 17:04:47 -0700 From: Casey Schaufler To: kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, casey.schaufler@intel.com, dave.hansen@intel.com, deneen.t.dock@intel.com, kristen@linux.intel.com, arjan@linux.intel.com Date: Mon, 20 Aug 2018 17:04:43 -0700 Message-Id: <20180821000444.7004-5-casey.schaufler@intel.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20180821000444.7004-1-casey.schaufler@intel.com> References: <20180821000444.7004-1-casey.schaufler@intel.com> X-Mailman-Approved-At: Tue, 21 Aug 2018 08:10:45 -0400 Subject: [PATCH v3 4/5] Smack: Support determination of side-channel X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Smack considers its private task data safe if the current task has read access to the passed task. Signed-off-by: Casey Schaufler --- security/smack/smack_lsm.c | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 91750205a5de..85dc053e610c 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -2299,6 +2299,23 @@ static void smack_task_to_inode(struct task_struct *p, struct inode *inode) isp->smk_inode = skp; } +/** + * smack_task_safe_sidechannel - Are the task and current sidechannel safe? + * @p: task to check on + * + * A crude value for sidechannel safety is that the current task is + * already allowed to read from the other. + * + * Returns 0 if the tasks are sidechannel safe, -EACCES otherwise. + */ +static int smack_task_safe_sidechannel(struct task_struct *p) +{ + struct smack_known *skp = smk_of_task_struct(p); + struct smack_known *ckp = smk_of_task_struct(current); + + return smk_access(ckp, skp, MAY_READ, NULL); +} + /* * Socket hooks. */ @@ -4718,6 +4735,7 @@ static struct security_hook_list smack_hooks[] __lsm_ro_after_init = { LSM_HOOK_INIT(task_movememory, smack_task_movememory), LSM_HOOK_INIT(task_kill, smack_task_kill), LSM_HOOK_INIT(task_to_inode, smack_task_to_inode), + LSM_HOOK_INIT(task_safe_sidechannel, smack_task_safe_sidechannel), LSM_HOOK_INIT(ipc_permission, smack_ipc_permission), LSM_HOOK_INIT(ipc_getsecid, smack_ipc_getsecid),