From patchwork Mon Nov 5 19:05:01 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Schaufler, Casey" X-Patchwork-Id: 10669039 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id C016E1709 for ; Mon, 5 Nov 2018 19:37:13 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id A441F2938A for ; Mon, 5 Nov 2018 19:37:09 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 92E2729567; Mon, 5 Nov 2018 19:37:09 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from usfb19pa16.eemsg.mail.mil (uphb19pa13.eemsg.mail.mil [214.24.26.87]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 4CB1129815 for ; Mon, 5 Nov 2018 19:36:54 +0000 (UTC) X-EEMSG-check-008: 141141830|USFB19PA16_EEMSG_MP12.csd.disa.mil Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by usfb19pa16.eemsg.mail.mil with ESMTP/TLS/DHE-RSA-AES256-SHA256; 05 Nov 2018 19:36:52 +0000 X-IronPort-AV: E=Sophos;i="5.54,469,1534809600"; d="scan'208";a="17563559" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2DJAgBvmuBb/wHyM5BlHAEBAQQBAQcEAQGBZYIFgWUWEoxtizmCDZI2hQuBXBcYEwGIEyI4FgEDAQEBAQEBAgFsKII2JIJhAwMBAjcUIA4DCQEBHyEICAMBLRURBwcLBRgEgwCCAqwCiiCHToQogVg/iGoEARIBhXoCjzczj0gHAoIUBI5uCxiQYCyXGoFaIWRxTSNQgmyQek6BBQEBikEPF4InAQE Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 05 Nov 2018 19:36:51 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id wA5JaIGb028355; Mon, 5 Nov 2018 14:36:24 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id wA5J5AM4032810 for ; Mon, 5 Nov 2018 14:05:10 -0500 Received: from goalie.tycho.ncsc.mil (goalie.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id wA5J59X7024110 for ; Mon, 5 Nov 2018 14:05:09 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1BZAAANlOBbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUSI1DA0BAwEBAQEBAQIUAQEWOoVqAwOBCSAxVwcSgyGCAqtviiCHToQogVg/iGqGEgKPao9IBwKCFASObgsYkGAslxqBRQE0gVZNI4M8kHoeMItIgk0BAQ X-IPAS-Result: A1BZAAANlOBbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUSI1DA0BAwEBAQEBAQIUAQEWOoVqAwOBCSAxVwcSgyGCAqtviiCHToQogVg/iGqGEgKPao9IBwKCFASObgsYkGAslxqBRQE0gVZNI4M8kHoeMItIgk0BAQ X-IronPort-AV: E=Sophos;i="5.54,468,1534824000"; d="scan'208";a="407573" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 05 Nov 2018 14:05:07 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0FZAAAhk+BbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUiI1DA0BAwEBAQEBAQIBAQIQAQEWOi+CNiKCZAMDgQkgMVcHEoMhggKrZ4ogh06EKIFYP4hqhhICj2qPSAcCghQEjm4LGJBgLJcagUUBNIFXTSODPJB6HjCLSIJNAQE X-IPAS-Result: A0FZAAAhk+BbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUiI1DA0BAwEBAQEBAQIBAQIQAQEWOi+CNiKCZAMDgQkgMVcHEoMhggKrZ4ogh06EKIFYP4hqhhICj2qPSAcCghQEjm4LGJBgLJcagUUBNIFXTSODPJB6HjCLSIJNAQE X-IronPort-AV: E=Sophos;i="5.54,468,1534809600"; d="scan'208";a="7677509" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from fmsmga002-icc.fm.intel.com ([198.175.99.35]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Nov 2018 19:05:06 +0000 Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga002-icc.fm.intel.com with ESMTP; 05 Nov 2018 11:05:06 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,468,1534834800"; d="scan'208";a="271567353" Received: from cschaufl-mobl.amr.corp.intel.com ([10.254.103.117]) by orsmga005.jf.intel.com with ESMTP; 05 Nov 2018 11:05:05 -0800 From: Casey Schaufler To: kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, casey.schaufler@intel.com, dave.hansen@intel.com, deneen.t.dock@intel.com, kristen@linux.intel.com, arjan@linux.intel.com Date: Mon, 5 Nov 2018 11:05:01 -0800 Message-Id: <20181105190504.500-3-casey.schaufler@intel.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20181105190504.500-1-casey.schaufler@intel.com> References: <20181105190504.500-1-casey.schaufler@intel.com> X-Mailman-Approved-At: Mon, 05 Nov 2018 14:36:17 -0500 Subject: [PATCH v6 2/5] Smack: Prepare for PTRACE_MODE_SCHED X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP From: Casey Schaufler A ptrace access check with mode PTRACE_MODE_SCHED gets called from process switching code. This precludes the use of audit, as the locking is incompatible. Don't do audit in the PTRACE_MODE_SCHED case. Signed-off-by: Casey Schaufler --- security/smack/smack_lsm.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 340fc30ad85d..ffa95bcab599 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -422,7 +422,8 @@ static int smk_ptrace_rule_check(struct task_struct *tracer, struct task_smack *tsp; struct smack_known *tracer_known; - if ((mode & PTRACE_MODE_NOAUDIT) == 0) { + if ((mode & PTRACE_MODE_NOAUDIT) == 0 && + (mode & PTRACE_MODE_SCHED) == 0) { smk_ad_init(&ad, func, LSM_AUDIT_DATA_TASK); smk_ad_setfield_u_tsk(&ad, tracer); saip = &ad;