Re: [PATCH] lkdtm: add bad USER_DS test

2017-03-24 Thread Kees Cook
On Fri, Mar 24, 2017 at 8:24 AM, Christian Borntraeger wrote: > On 03/24/2017 04:17 PM, Thomas Garnier wrote: >> On Fri, Mar 24, 2017 at 1:14 AM, Heiko Carstens >> wrote: >>> On Thu, Mar 23, 2017 at 01:34:19PM -0700, Kees Cook wrote: This adds CORRUPT_USER_DS to check that the get_fs() test

Re: [PATCH] lkdtm: add bad USER_DS test

2017-03-24 Thread Thomas Garnier
On Fri, Mar 24, 2017 at 8:24 AM, Christian Borntraeger wrote: > On 03/24/2017 04:17 PM, Thomas Garnier wrote: >> On Fri, Mar 24, 2017 at 1:14 AM, Heiko Carstens >> wrote: >>> On Thu, Mar 23, 2017 at 01:34:19PM -0700, Kees Cook wrote: This adds CORRUPT_USER_DS to check that the get_fs() test

Re: [PATCH] lkdtm: add bad USER_DS test

2017-03-24 Thread Christian Borntraeger
On 03/24/2017 04:17 PM, Thomas Garnier wrote: > On Fri, Mar 24, 2017 at 1:14 AM, Heiko Carstens > wrote: >> On Thu, Mar 23, 2017 at 01:34:19PM -0700, Kees Cook wrote: >>> This adds CORRUPT_USER_DS to check that the get_fs() test on syscall return >>> still sees USER_DS during the new VERIFY_PRE_US

Re: [PATCH] lkdtm: add bad USER_DS test

2017-03-24 Thread Thomas Garnier
On Fri, Mar 24, 2017 at 1:14 AM, Heiko Carstens wrote: > On Thu, Mar 23, 2017 at 01:34:19PM -0700, Kees Cook wrote: >> This adds CORRUPT_USER_DS to check that the get_fs() test on syscall return >> still sees USER_DS during the new VERIFY_PRE_USERMODE_STATE checks. >> >> Signed-off-by: Kees Cook

Re: [PATCH] lkdtm: add bad USER_DS test

2017-03-24 Thread Heiko Carstens
On Thu, Mar 23, 2017 at 01:34:19PM -0700, Kees Cook wrote: > This adds CORRUPT_USER_DS to check that the get_fs() test on syscall return > still sees USER_DS during the new VERIFY_PRE_USERMODE_STATE checks. > > Signed-off-by: Kees Cook ... > +void lkdtm_CORRUPT_USER_DS(void) > +{ > + /* > +

[PATCH] lkdtm: add bad USER_DS test

2017-03-23 Thread Kees Cook
This adds CORRUPT_USER_DS to check that the get_fs() test on syscall return still sees USER_DS during the new VERIFY_PRE_USERMODE_STATE checks. Signed-off-by: Kees Cook --- drivers/misc/lkdtm.h | 1 + drivers/misc/lkdtm_bugs.c | 20 drivers/misc/lkdtm_core.c | 1 + 3