Eric W. Biederman
e71b4e061c
ptrace: Don't allow accessing an undumpable mm
...
commit 84d77d3f06e7e8dea057d10e8ec77ad71f721be3 upstream.
It is the reasonable expectation that if an executable file is not
readable there will be no way for a user without special privileges to
read the file. This is enforced in ptrace_attach but if ptrace
is already attached before exec there is no enforcement for read-only
executables.
As the only way to read such an mm is through access_process_vm
spin a variant called ptrace_access_vm that will fail if the
target process is not being ptraced by the current process, or
the current process did not have sufficient privileges when ptracing
began to read the target processes mm.
In the ptrace implementations replace access_process_vm by
ptrace_access_vm. There remain several ptrace sites that still use
access_process_vm as they are reading the target executables
instructions (for kernel consumption) or register stacks. As such it
does not appear necessary to add a permission check to those calls.
This bug has always existed in Linux.
Fixes: v1.0
Reported-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-01-06 10:40:13 +01:00
..
.gitignore
alpha: .gitignore vmlinux.lds
2009-01-15 16:39:40 -08:00
asm-offsets.c
audit.c
alpha: Enable system-call auditing support.
2014-01-31 09:21:55 -08:00
binfmt_loader.c
get rid of pt_regs argument of ->load_binary()
2012-11-28 21:53:38 -05:00
console.c
TTY:vt: convert remain take_over_console's users to do_take_over_console
2013-05-20 22:29:27 -07:00
core_apecs.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
core_cia.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
core_irongate.c
PCI: Remove unnecessary #includes of <asm/pci.h>
2015-06-08 07:56:09 -05:00
core_lca.c
Fix common misspellings
2011-03-31 11:26:23 -03:00
core_marvel.c
char/genrtc: remove alpha support
2016-06-04 00:23:02 +02:00
core_mcpcia.c
alpha: Remove set but unused variables.
2011-04-17 14:41:30 -07:00
core_polaris.c
core_t2.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
core_titan.c
arch/alpha/kernel: Add kmalloc NULL tests
2009-11-30 15:38:19 -05:00
core_tsunami.c
alpha: include module.h to fix modpost on Tsunami
2012-05-02 15:54:06 -04:00
core_wildfire.c
entry.S
alpha: Enable system-call auditing support.
2014-01-31 09:21:55 -08:00
err_common.c
err_ev6.c
alpha: delete non-required instances of <linux/init.h>
2015-05-26 10:01:48 -07:00
err_ev7.c
alpha: titan and marvel build fixes
2009-05-02 15:36:10 -07:00
err_impl.h
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
err_marvel.c
Fix common misspellings
2011-03-31 11:26:23 -03:00
err_titan.c
alpha: Remove set but unused variables.
2011-04-17 14:41:30 -07:00
es1888.c
gct.c
head.S
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
io.c
irq.c
genirq: Remove irq argument from irq flow handlers
2015-09-16 15:47:51 +02:00
irq_alpha.c
alpha: Use qemu+cserve provided high-res clock and alarm.
2013-11-16 16:33:21 -08:00
irq_i8259.c
alpha: Convert to new irq function names
2011-03-29 14:47:58 +02:00
irq_impl.h
alpha: i8259, alcor, jensen wildfire: Convert irq_chip
2011-03-02 14:57:55 -05:00
irq_pyxis.c
alpha: Convert to new irq function names
2011-03-29 14:47:58 +02:00
irq_srm.c
alpha: Convert to new irq function names
2011-03-29 14:47:58 +02:00
machvec_impl.h
alpha: move exports to actual definitions
2016-08-07 23:47:18 -04:00
Makefile
alpha: move exports to actual definitions
2016-08-07 23:47:18 -04:00
module.c
module: use a structure to encapsulate layout.
2015-12-04 22:46:25 +01:00
osf_sys.c
give readdir(2)/getdents(2)/etc. uniform exclusion with lseek()
2016-05-02 19:49:28 -04:00
pc873xx.c
alpha: Detect Super IO chip, no IDE on Avanti, enable EPP19
2010-06-15 14:19:08 -04:00
pc873xx.h
alpha: Detect Super IO chip, no IDE on Avanti, enable EPP19
2010-06-15 14:19:08 -04:00
pci-noop.c
dma-mapping: use unsigned long for dma_attrs
2016-08-04 08:50:07 -04:00
pci-sysfs.c
alpha/PCI: Call iomem_is_exclusive() for IORESOURCE_MEM, but not IORESOURCE_IO
2016-04-25 15:59:50 -05:00
pci.c
PCI: Revert "PCI: Call pci_read_bridge_bases() from core instead of arch code"
2015-09-15 13:18:04 -05:00
pci_impl.h
alpha/PCI: replace pci_probe_only with pci_flags
2012-02-23 20:18:56 -07:00
pci_iommu.c
dma-mapping: use unsigned long for dma_attrs
2016-08-04 08:50:07 -04:00
perf_event.c
alpha: Replace __get_cpu_var
2014-08-26 13:45:53 -04:00
process.c
exit_thread: remove empty bodies
2016-05-20 17:58:30 -07:00
proto.h
alpha: Use qemu+cserve provided high-res clock and alarm.
2013-11-16 16:33:21 -08:00
ptrace.c
ptrace: Don't allow accessing an undumpable mm
2017-01-06 10:40:13 +01:00
rtc.c
rtc: cmos: move mc146818rtc code out of asm-generic/rtc.h
2016-06-04 00:20:00 +02:00
setup.c
alpha: move exports to actual definitions
2016-08-07 23:47:18 -04:00
signal.c
all arches, signal: move restart_block to struct task_struct
2015-02-12 18:54:12 -08:00
smc37c93x.c
alpha: Remove set but unused variables.
2011-04-17 14:41:30 -07:00
smc37c669.c
alpha: remove mysterious if zero-ed out includes
2012-07-30 17:25:11 -07:00
smp.c
arch/hotplug: Call into idle with a proper state
2016-03-01 20:36:57 +01:00
srm_env.c
srm_env: don't bother with pointer to srm_env_t
2013-04-09 14:13:33 -04:00
srmcons.c
alpha: don't use module_init for non-modular core code
2015-05-26 10:01:47 -07:00
sys_alcor.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_cabriolet.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_dp264.c
alpha: Don't if-out dp264_device_interrupt.
2013-07-19 13:54:26 -07:00
sys_eb64p.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_eiger.c
PCI: Remove unnecessary #includes of <asm/pci.h>
2015-06-08 07:56:09 -05:00
sys_jensen.c
alpha: Reorganize rtc handling
2013-11-16 16:33:16 -08:00
sys_marvel.c
alpha: clean up unnecessary MSI/MSI-X capability find
2015-05-26 10:01:44 -07:00
sys_miata.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_mikasa.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_nautilus.c
PCI: Remove unnecessary #includes of <asm/pci.h>
2015-06-08 07:56:09 -05:00
sys_noritake.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_rawhide.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_ruffian.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_rx164.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_sable.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_sio.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_sx164.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_takara.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
sys_titan.c
alpha: irq: remove deprecated use of IRQF_DISABLED
2013-04-07 12:59:30 -07:00
sys_wildfire.c
Disintegrate asm/system.h for Alpha
2012-03-28 18:11:12 +01:00
systbls.S
alpha: Wire up all missing implemented syscalls
2015-05-26 10:01:50 -07:00
time.c
alpha/time: Migrate to new 'set-state' interface
2015-08-10 11:40:58 +02:00
traps.c
alpha: delete non-required instances of <linux/init.h>
2015-05-26 10:01:48 -07:00
vmlinux.lds.S
nmi_backtrace: generate one-line reports for idle cpus
2016-10-07 18:46:30 -07:00