From patchwork Tue Aug 21 00:04:44 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Schaufler, Casey" X-Patchwork-Id: 10571419 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 9E059921 for ; Tue, 21 Aug 2018 12:11:54 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 8B04629F60 for ; Tue, 21 Aug 2018 12:11:54 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 7E00529F78; Tue, 21 Aug 2018 12:11:54 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from USFB19PA13.eemsg.mail.mil (uphb19pa10.eemsg.mail.mil [214.24.26.84]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id B605929F60 for ; Tue, 21 Aug 2018 12:11:53 +0000 (UTC) Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by USFB19PA13.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 21 Aug 2018 12:11:51 +0000 X-IronPort-AV: E=Sophos;i="5.53,269,1531785600"; d="scan'208";a="17238701" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2AcBACuAHxb/wHyM5BaHQEBBQELAYUgEhYSjFujfYFaFxgUiD03FQECAQEBAQEBAgFsKII1JIJfAwMBAiQTFCAOAwkBAUAICAMBLRURBwcLBRgEgwGCAqZhM4pginA/g2+FAAESAYV3Ao1NMI0IBwKCAgSNUgsVjjmTM4FXImFxTSNQgmmCJReON099jB2COgEB Received: from tarius.tycho.ncsc.mil (HELO tarius.infosec.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 21 Aug 2018 12:11:49 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus.infosec.tycho.ncsc.mil [192.168.25.40]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7LCAk0c023537; Tue, 21 Aug 2018 08:11:07 -0400 Received: from tarius.infosec.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w7L04nm5033221 for ; Mon, 20 Aug 2018 20:04:49 -0400 Received: from goalie.tycho.ncsc.mil (goalie.infosec.tycho.ncsc.mil [144.51.242.250]) by tarius.infosec.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w7L04nBU014334 for ; Mon, 20 Aug 2018 20:04:49 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AbBgDBVntbfSNjr8ZdHgEGDIUxFhKYGJoeC4RsAoNNITcVAQIBAQEBAQECFAEBFjqFZwMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+Db4sLAo13jQUHAoIABI1RCxWOOJMogVchgVNNI4M5giUXjjcfMI8LAQE X-IPAS-Result: A1AbBgDBVntbfSNjr8ZdHgEGDIUxFhKYGJoeC4RsAoNNITcVAQIBAQEBAQECFAEBFjqFZwMDJ2JRVwcSgyKCAqhgM4pkiRiBWD+Db4sLAo13jQUHAoIABI1RCxWOOJMogVchgVNNI4M5giUXjjcfMI8LAQE X-IronPort-AV: E=Sophos;i="5.53,267,1531800000"; d="scan'208";a="350584" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 20 Aug 2018 20:04:49 -0400 IronPort-PHdr: 9a23:kVai7B9j5NvES/9uRHKM819IXTAuvvDOBiVQ1KB21eocTK2v8tzYMVDF4r011RmVBdqds6oMotGVmpioYXYH75eFvSJKW713fDhBt/8rmRc9CtWOE0zxIa2iRSU7GMNfSA0tpCnjYgBaF8nkelLdvGC54yIMFRXjLwp1Ifn+FpLPg8it2O2+55/ebx9UiDahfLh/MAi4oQLNu8cMnIBsMLwxyhzHontJf+RZ22ZlLk+Nkhj/+8m94odt/zxftPw9+cFAV776f7kjQrxDEDsmKWE169b1uhTFUACC+2ETUmQSkhpPHgjF8BT3VYr/vyfmquZw3jSRMMvrRr42RDui9b9mRh/2hikaOTA382bZhc5+jK9AvB6tuwZyz5LObY2JKPZzeL7Wc9MARWpGW8ZcTzJMDZmnb4QRD+sKIPtWoJX9p1QUsBu+Cw2sC/31yjRVgXL5wbc10/8/HgDGxgAgBM4BsHTOo9XoOqcSVf66zLPTwDXCafNWxSny6IzSfh89pvGMWKt9fMzMwkcsDwPIlkicpIjmMj+Py+gAsWiW4/BkWO+rkWIqpQF8rz6yzck2kIbJnJgaylXc+CV53ok1Idq4RVZ1Yd6hC5tQsi6aOJFqTs8+XW1koSc6xaEatpKhcigKzY4rxx/Za/ybbYeI5gjvW/qWITd9nH5lebS/iAiu8UW41+HxUsq53ExXoidHktTArHQA2hjJ5sWJSvZx5kKh1iyO1wDX5OFEO0c0la/DJpE92LEwjYQcsETZEi/thEr2jLWZdlgq+uis9evneK7rpp6aN49olA7+Nr4ildC4AeQ9KgQORXSU+fyg1L3/+k30WK5KgeMykqnYtpDaOMsaq7WlAw5Vzokj6xG/Ay2g0NQDh3YLNl1FeBWZj9uhB1abI/3iC/q7xlSlijtmwfHAMZXlA47RNT7EiLrnYr957whXzw93hdRe4Y9ET7IMOvT+Xmfvu9HCSBw0KQq5x6DgEto5nocfX3+fR7SUO77IsEOZo+coL/SIaacLtzvnbfso/fjjiTk+g1BZNbKk2ZoRdWCQAuVtI0LfZ2HlxNgGDyNCtQMlQf2sk1aCWCNdY3uod6M6+jw/TomhCMOLSomzjfqB1SGgE5t+Z2ZaB1TKGnDtM82IVvEBZSTUPoltlTcHfbmnV4IlkxqpsUuyyKBmNfbZ/AUctJT+xJ504fHekVc58jkwR82H0WiLZ2V1mH4YAT4wwK1750d6zwSty6991tdRDtFCr8hCUg4nO5rR1aQuANnpVxOHZdyJQUuoRti8KTA3Ut81hdQJZhAuSJ2Zkhnf0n/yUPcunLuRCcls/w== X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0GkBQDBVntbfSNjr8ZdHgEGDIUxFhKYGZoeC4RsAoNOITcVAQIBAQEBAQECAQECEAEBFjovgjUigmIDAydiUVcHEoMiggKoYDOKZIkYgVg/g2+LCwKNd40FBwKCAASNUQsVjjiTKIFXIYFUTSODOYIlF443HzCPCwEB X-IPAS-Result: A0GkBQDBVntbfSNjr8ZdHgEGDIUxFhKYGZoeC4RsAoNOITcVAQIBAQEBAQECAQECEAEBFjovgjUigmIDAydiUVcHEoMiggKoYDOKZIkYgVg/g2+LCwKNd40FBwKCAASNUQsVjjiTKIFXIYFUTSODOYIlF443HzCPCwEB X-IronPort-AV: E=Sophos;i="5.53,267,1531785600"; d="scan'208";a="7622030" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from fmsmga002-icc.fm.intel.com ([198.175.99.35]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Aug 2018 00:04:48 +0000 Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga002-icc.fm.intel.com with ESMTP; 20 Aug 2018 17:04:48 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.53,267,1531810800"; d="scan'208";a="250527805" Received: from cschaufl-mobl.amr.corp.intel.com ([10.252.136.122]) by orsmga005.jf.intel.com with ESMTP; 20 Aug 2018 17:04:47 -0700 From: Casey Schaufler To: kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, casey.schaufler@intel.com, dave.hansen@intel.com, deneen.t.dock@intel.com, kristen@linux.intel.com, arjan@linux.intel.com Date: Mon, 20 Aug 2018 17:04:44 -0700 Message-Id: <20180821000444.7004-6-casey.schaufler@intel.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20180821000444.7004-1-casey.schaufler@intel.com> References: <20180821000444.7004-1-casey.schaufler@intel.com> X-Mailman-Approved-At: Tue, 21 Aug 2018 08:10:45 -0400 Subject: [PATCH v3 5/5] SELinux: Support SELinux determination of side-channel X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP SELinux considers tasks to be side-channel safe if they have FILE__READ access. Signed-off-by: Casey Schaufler --- security/selinux/hooks.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index a8bf324130f5..992f2402edaa 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -4219,6 +4219,14 @@ static void selinux_task_to_inode(struct task_struct *p, spin_unlock(&isec->lock); } +static int selinux_task_safe_sidechannel(struct task_struct *p) +{ + struct av_decision avd; + + return avc_has_perm_noaudit(&selinux_state, current_sid(), task_sid(p), + SECCLASS_FILE, FILE__READ, 0, &avd); +} + /* Returns error only if unable to parse addresses */ static int selinux_parse_skb_ipv4(struct sk_buff *skb, struct common_audit_data *ad, u8 *proto) @@ -7002,6 +7010,7 @@ static struct security_hook_list selinux_hooks[] __lsm_ro_after_init = { LSM_HOOK_INIT(task_movememory, selinux_task_movememory), LSM_HOOK_INIT(task_kill, selinux_task_kill), LSM_HOOK_INIT(task_to_inode, selinux_task_to_inode), + LSM_HOOK_INIT(task_safe_sidechannel, selinux_task_safe_sidechannel), LSM_HOOK_INIT(ipc_permission, selinux_ipc_permission), LSM_HOOK_INIT(ipc_getsecid, selinux_ipc_getsecid),