Kees Cook 631792ffa5 futex: Do not leak robust list to unprivileged process ... commit bdbb776f88 upstream. It was possible to extract the robust list head address from a setuid process if it had used set_robust_list(), allowing an ASLR info leak. This changes the permission checks to be the same as those used for similar info that comes out of /proc. Running a setuid program that uses robust futexes would have had: cred->euid != pcred->euid cred->euid == pcred->uid so the old permissions check would allow it. I'm not aware of any setuid programs that use robust futexes, so this is just a preventative measure. (This patch is based on changes from grsecurity.) Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Darren Hart <dvhart@linux.intel.com> Cc: Peter Zijlstra <a.p.zijlstra@chello.nl> Cc: Jiri Kosina <jkosina@suse.cz> Cc: Eric W. Biederman <ebiederm@xmission.com> Cc: David Howells <dhowells@redhat.com> Cc: Serge E. Hallyn <serge.hallyn@canonical.com> Cc: kernel-hardening@lists.openwall.com Cc: spender@grsecurity.net Link: http://lkml.kernel.org/r/20120319231253.GA20893@www.outflux.net Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2012-04-22 16:21:45 -07:00
..
debug	kgdb,debug_core: pass the breakpoint struct instead of address and memory	2012-04-13 08:14:07 -07:00
events	perf: Fix software event overflow	2011-08-04 21:58:35 -07:00
gcov	gcov: disable CONFIG_CONSTRUCTORS when not needed by CONFIG_GCOV_KERNEL	2011-06-15 20:04:01 -07:00
irq	genirq: Adjust irq thread affinity on IRQ_SET_MASK_OK_NOCOPY return value	2012-04-13 08:14:06 -07:00
power	PM / Hibernate: Enable usermodehelpers in hibernate() error path	2012-04-02 09:27:18 -07:00
time	nohz: Fix stale jiffies update in tick_nohz_restart()	2012-04-22 16:21:25 -07:00
trace	tracing: Fix ftrace stack trace entries	2012-04-13 08:14:06 -07:00
.gitignore
acct.c
async.c
audit_tree.c
audit_watch.c
audit.c
audit.h
auditfilter.c
auditsc.c
backtracetest.c
bounds.c
capability.c
cgroup_freezer.c	cgroup_freezer: fix freezing groups with stopped tasks	2011-12-09 08:52:27 -08:00
cgroup.c	cgroup: fix to allow mounting a hierarchy by name	2012-01-12 11:35:08 -08:00
compat.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile	2011-05-25 15:35:32 -07:00
configs.c
cpu.c	PM / Sleep: Fix race between CPU hotplug and freezer	2012-01-12 11:35:46 -08:00
cpuset.c	cpuset: Fix cpuset_cpus_allowed_fallback(), don't update tsk->rt.nr_cpus_allowed	2011-05-28 17:02:57 +02:00
crash_dump.c
cred.c	cred: copy_process() should clear child->replacement_session_keyring	2012-04-13 08:14:08 -07:00
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c	ptrace: partially fix the do_wait(WEXITED) vs EXIT_DEAD->EXIT_ZOMBIE race	2012-01-06 14:14:14 -08:00
extable.c
fork.c	epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree()	2012-02-29 16:34:34 -08:00
freezer.c
futex_compat.c	futex: Do not leak robust list to unprivileged process	2012-04-22 16:21:45 -07:00
futex.c	futex: Do not leak robust list to unprivileged process	2012-04-22 16:21:45 -07:00
groups.c
hrtimer.c	hrtimer: Fix extra wakeups from __remove_hrtimer()	2011-12-09 08:52:28 -08:00
hung_task.c	hung_task: fix false positive during vfork	2012-01-06 14:14:13 -08:00
irq_work.c
itimer.c
jump_label.c	jump_label: jump_label_inc may return before the code is patched	2011-12-09 08:52:50 -08:00
kallsyms.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kexec.c
kfifo.c
kmod.c	kmod: prevent kmod_loop_msg overflow in __request_module()	2011-11-11 09:35:48 -08:00
kprobes.c	kprobes: adjust "fix a memory leak in function pre_handler_kretprobe()"	2012-03-12 10:32:57 -07:00
ksysfs.c
kthread.c	cpuset: Fix cpuset_cpus_allowed_fallback(), don't update tsk->rt.nr_cpus_allowed	2011-05-28 17:02:57 +02:00
latencytop.c
lockdep_internals.h
lockdep_proc.c
lockdep_states.h
lockdep.c	lockdep: Fix lock_is_held() on recursion	2011-06-07 12:25:50 +02:00
Makefile	cgroup: remove the ns_cgroup	2011-05-26 17:12:34 -07:00
module.c	module: Remove module size limit	2012-04-02 09:27:20 -07:00
mutex-debug.c
mutex-debug.h
mutex.c	lockdep, mutex: provide mutex_lock_nest_lock	2011-05-25 08:39:17 -07:00
mutex.h
notifier.c
nsproxy.c	cgroup: remove the ns_cgroup	2011-05-26 17:12:34 -07:00
padata.c
panic.c	lockdep, bug: Exclude TAINT_FIRMWARE_WORKAROUND from disabling lockdep	2012-02-13 11:06:10 -08:00
params.c
pid_namespace.c
pid.c
pm_qos_params.c	Merge branch 'idle-release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux-idle-2.6	2011-05-29 11:18:09 -07:00
posix-cpu-timers.c	cputimer: Cure lock inversion	2011-10-25 07:10:14 +02:00
posix-timers.c	posix-timers: RCU conversion	2011-05-24 12:10:51 +02:00
printk.c	cap_syslog: don't use WARN_ONCE for CAP_SYS_ADMIN deprecation warning	2012-02-03 09:18:57 -08:00
profile.c	kernel/profile.c: remove some duplicate code from profile_hits()	2011-05-26 17:12:37 -07:00
ptrace.c	ptrace: ptrace_resume() shouldn't wake up !TASK_TRACED thread	2011-05-25 19:20:21 +02:00
range.c
rcupdate.c
rcutiny_plugin.h
rcutiny.c
rcutorture.c
rcutree_plugin.h	softirq,rcu: Inform RCU of irq_exit() activity	2011-07-20 10:50:12 -07:00
rcutree_trace.c	rcu: use softirq instead of kthreads except when RCU_BOOST=y	2011-06-15 23:07:21 -07:00
rcutree.c	rcu: Prevent RCU callbacks from executing before scheduler initialized	2011-07-13 08:17:56 -07:00
rcutree.h	rcu: Move RCU_BOOST #ifdefs to header file	2011-06-16 16:12:05 -07:00
relay.c	relay: prevent integer overflow in relay_open()	2012-02-20 12:48:10 -08:00
res_counter.c
resource.c	resource: ability to resize an allocated resource	2011-07-06 10:54:08 -07:00
rtmutex_common.h
rtmutex-debug.c
rtmutex-debug.h
rtmutex-tester.c
rtmutex.c
rtmutex.h
rwsem.c
sched_autogroup.c
sched_autogroup.h
sched_clock.c
sched_cpupri.c
sched_cpupri.h
sched_debug.c
sched_fair.c	sched: Break out cpu_power from the sched_group structure	2011-07-20 18:32:40 +02:00
sched_features.h	sched: Allow for overlapping sched_domain spans	2011-07-20 18:32:41 +02:00
sched_idletask.c
sched_rt.c	sched/rt: Fix task stack corruption under __ARCH_WANT_INTERRUPTS_ON_CTXSW	2012-02-13 11:06:08 -08:00
sched_stats.h	sched: More sched_domain iterations fixes	2011-05-28 17:02:54 +02:00
sched_stoptask.c
sched.c	posix-cpu-timers: Cure SMP wobbles	2011-10-16 14:14:51 -07:00
seccomp.c
semaphore.c
signal.c	ptrace: don't clear GROUP_STOP_SIGMASK on double-stop	2011-11-11 09:36:23 -08:00
smp.c	generic-ipi: Fix kexec boot crash by initializing call_single_queue before enabling interrupts	2011-06-17 10:17:12 +02:00
softirq.c	softirq,rcu: Inform RCU of irq_exit() activity	2011-07-20 10:50:12 -07:00
spinlock.c
srcu.c
stacktrace.c
stop_machine.c	x86, mtrr: lock stop machine during MTRR rendezvous sequence	2011-08-29 13:29:08 -07:00
sys_ni.c
sys.c	Avoid using variable-length arrays in kernel/sys.c	2011-10-25 07:10:14 +02:00
sysctl_binary.c	binary_sysctl(): fix memory leak	2012-01-06 14:13:50 -08:00
sysctl_check.c
sysctl.c	sysctl: fix write access to dmesg_restrict/kptr_restrict	2012-04-13 08:14:07 -07:00
taskstats.c	Make TASKSTATS require root access	2011-12-21 12:57:40 -08:00
test_kprobes.c
time.c	time: Change jiffies_to_clock_t() argument type to unsigned long	2011-11-11 09:35:52 -08:00
timeconst.pl
timer.c	timers: Consider slack value in mod_timer()	2011-06-03 15:02:32 +02:00
tracepoint.c
tsacct.c
uid16.c
up.c
user_namespace.c
user-return-notifier.c
user.c
utsname_sysctl.c
utsname.c
wait.c
watchdog.c	kernel/watchdog.c: Use proper ANSI C prototypes	2011-05-23 21:07:40 -07:00
workqueue_sched.h
workqueue.c	Block: use a freezable workqueue for disk-event polling	2012-03-19 08:57:59 -07:00