Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-02 Thread Jessica Yu
+++ Johannes Thumshirn [01/04/19 11:01 +0200]: Over the last 20 years, the Linux kernel has accumulated hundreds if not thousands of security vulnerabilities. One common pattern in most of these security related reports is processes called "syzkaller", "trinity" or "syz-executor" opening files a

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Kees Cook
On Mon, Apr 1, 2019 at 10:50 AM Dmitry Vyukov wrote: > > On Mon, Apr 1, 2019 at 4:14 PM Nikolay Borisov wrote: > > On 1.04.19 г. 12:01 ч., Johannes Thumshirn wrote: > > > One common pattern in most of these security related reports is processes > > > called "syzkaller", "trinity" or "syz-executor

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Darrick J. Wong
On Mon, Apr 01, 2019 at 11:01:13AM +0200, Johannes Thumshirn wrote: > Over the last 20 years, the Linux kernel has accumulated hundreds if not > thousands of security vulnerabilities. > > One common pattern in most of these security related reports is processes > called "syzkaller", "trinity" or "

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Dmitry Vyukov
On Mon, Apr 1, 2019 at 4:14 PM Nikolay Borisov wrote: > On 1.04.19 г. 12:01 ч., Johannes Thumshirn wrote: > > Over the last 20 years, the Linux kernel has accumulated hundreds if not > > thousands of security vulnerabilities. > > > > One common pattern in most of these security related reports is

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Eric Biggers
On Mon, Apr 01, 2019 at 11:01:13AM +0200, Johannes Thumshirn wrote: > Over the last 20 years, the Linux kernel has accumulated hundreds if not > thousands of security vulnerabilities. > > One common pattern in most of these security related reports is processes > called "syzkaller", "trinity" or "

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Nikolay Borisov
On 1.04.19 г. 12:01 ч., Johannes Thumshirn wrote: > Over the last 20 years, the Linux kernel has accumulated hundreds if not > thousands of security vulnerabilities. > > One common pattern in most of these security related reports is processes > called "syzkaller", "trinity" or "syz-executor" o

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Torsten Duwe
On Mon, Apr 01, 2019 at 11:01:13AM +0200, Johannes Thumshirn wrote: > Over the last 20 years, the Linux kernel has accumulated hundreds if not > thousands of security vulnerabilities. > > One common pattern in most of these security related reports is processes > called "syzkaller", "trinity" or "

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Mukesh Ojha
On 4/1/2019 2:31 PM, Johannes Thumshirn wrote: Over the last 20 years, the Linux kernel has accumulated hundreds if not thousands of security vulnerabilities. One common pattern in most of these security related reports is processes called "syzkaller", "trinity" or "syz-executor" opening files

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Johannes Thumshirn
On 01/04/2019 13:22, Matthew Wilcox wrote: [...] > > I think you should have credited Cisco for the idea. > > https://twitter.com/RedTeamPT/status/1110843396657238016 I actually had the idea longer but they won the race by several days. Just not sure if their calendar was broken or it was a se

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Matthew Wilcox
On Mon, Apr 01, 2019 at 11:01:13AM +0200, Johannes Thumshirn wrote: > Over the last 20 years, the Linux kernel has accumulated hundreds if not > thousands of security vulnerabilities. > > One common pattern in most of these security related reports is processes > called "syzkaller", "trinity" or "

[PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Johannes Thumshirn
Over the last 20 years, the Linux kernel has accumulated hundreds if not thousands of security vulnerabilities. One common pattern in most of these security related reports is processes called "syzkaller", "trinity" or "syz-executor" opening files and then abuse kernel interfaces causing kernel cr