On Wed, Aug 17, 2016 at 2:21 PM, Paul Moore <[email protected]> wrote: > On Thu, Jul 21, 2016 at 4:24 PM, John Stultz <[email protected]> wrote: >> As requested, this patch checks the existing LSM hooks >> task_getscheduler/task_setscheduler when reading or modifying >> the task's timerslack value. >> >> Previous versions added new get/settimerslack LSM hooks, but >> since they checked the same PROCESS__SET/GETSCHED values as >> existing hooks, it was suggested we just use the existing ones. >> >> Cc: Kees Cook <[email protected]> >> Cc: "Serge E. Hallyn" <[email protected]> >> Cc: Andrew Morton <[email protected]> >> Cc: Thomas Gleixner <[email protected]> >> CC: Arjan van de Ven <[email protected]> >> Cc: Oren Laadan <[email protected]> >> Cc: Ruchi Kandoi <[email protected]> >> Cc: Rom Lemarchand <[email protected]> >> Cc: Todd Kjos <[email protected]> >> Cc: Colin Cross <[email protected]> >> Cc: Nick Kralevich <[email protected]> >> Cc: Dmitry Shmidt <[email protected]> >> Cc: Elliott Hughes <[email protected]> >> Cc: James Morris <[email protected]> >> Cc: Android Kernel Team <[email protected]> >> Cc: [email protected] >> Cc: [email protected] >> Signed-off-by: John Stultz <[email protected]> >> --- >> v2: >> * Initial swing at adding settimerslack LSM hook >> v3: >> * Fix current/p switchup bug noted by NickK >> * Add gettimerslack hook suggested by NickK >> v4: >> * Dropped adding get/settimerslack LSM hooks, and >> just reuse the get/setscheduler ones. >> >> fs/proc/base.c | 10 ++++++++++ >> 1 file changed, 10 insertions(+) > > For some reason I'm having a hard time finding patch 1/2 in the > patchset, but this patch looks reasonable to me. We already have some
https://lkml.org/lkml/2016/7/21/522 > LSM checking via the ptrace_may_access() call, but this adds some > additional granularity which could be a good thing. > > Acked-by: Paul Moore <[email protected]> Thanks. There's also this follow-on patch (and discussion thread) that adds a fix to the 1/2 patch linked above. https://lkml.org/lkml/2016/8/9/876 thanks -john
