Jeff Xu 105ff5339f
mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC ...
The new MFD_NOEXEC_SEAL and MFD_EXEC flags allows application to set
executable bit at creation time (memfd_create).
When MFD_NOEXEC_SEAL is set, memfd is created without executable bit
(mode:0666), and sealed with F_SEAL_EXEC, so it can't be chmod to be
executable (mode: 0777) after creation.
when MFD_EXEC flag is set, memfd is created with executable bit
(mode:0777), this is the same as the old behavior of memfd_create.
The new pid namespaced sysctl vm.memfd_noexec has 3 values:
0: memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL acts like
MFD_EXEC was set.
1: memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL acts like
MFD_NOEXEC_SEAL was set.
2: memfd_create() without MFD_NOEXEC_SEAL will be rejected.
The sysctl allows finer control of memfd_create for old-software that
doesn't set the executable bit, for example, a container with
vm.memfd_noexec=1 means the old-software will create non-executable memfd
by default. Also, the value of memfd_noexec is passed to child namespace
at creation time. For example, if the init namespace has
vm.memfd_noexec=2, all its children namespaces will be created with 2.
[akpm@linux-foundation.org: add stub functions to fix build]
[akpm@linux-foundation.org: remove unneeded register_pid_ns_ctl_table_vm() stub, per Jeff]
[akpm@linux-foundation.org: s/pr_warn_ratelimited/pr_warn_once/, per review]
[akpm@linux-foundation.org: fix CONFIG_SYSCTL=n warning]
Link: https://lkml.kernel.org/r/20221215001205.51969-4-jeffxu@google.com
Signed-off-by: Jeff Xu <jeffxu@google.com >
Co-developed-by: Daniel Verkamp <dverkamp@chromium.org >
Signed-off-by: Daniel Verkamp <dverkamp@chromium.org >
Reported-by: kernel test robot <lkp@intel.com >
Reviewed-by: Kees Cook <keescook@chromium.org >
Cc: David Herrmann <dh.herrmann@gmail.com >
Cc: Dmitry Torokhov <dmitry.torokhov@gmail.com >
Cc: Hugh Dickins <hughd@google.com >
Cc: Jann Horn <jannh@google.com >
Cc: Jorge Lucangeli Obes <jorgelo@chromium.org >
Cc: Shuah Khan <skhan@linuxfoundation.org >
Signed-off-by: Andrew Morton <akpm@linux-foundation.org >
2023-01-18 17:12:37 -08:00
2022-06-27 16:16:30 +02:00
2021-12-21 15:09:46 -08:00
2020-07-15 20:34:11 -07:00
2022-09-15 09:08:09 +02:00
2021-09-13 14:51:10 -05:00
2022-12-07 17:58:47 +01:00
2020-01-21 11:41:36 +01:00
2022-11-17 22:49:39 +01:00
2022-09-21 18:42:55 +01:00
2019-09-07 17:44:25 +02:00
2021-01-25 18:44:44 +01:00
2022-06-28 21:26:05 +02:00
2022-11-30 18:55:36 +01:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2022-08-09 19:51:05 +02:00
2021-10-02 15:50:45 -04:00
2022-06-28 21:26:05 +02:00
2020-11-19 11:25:47 +01:00
2022-04-19 13:13:47 +01:00
2021-06-16 17:47:53 +02:00
2022-11-08 12:15:19 +01:00
2022-12-08 16:53:47 +01:00
2022-04-29 14:38:03 -07:00
2022-11-23 19:55:22 +01:00
2019-06-26 20:14:13 -04:00
2022-05-13 10:56:10 +02:00
2018-11-19 19:03:43 -07:00
2021-11-01 13:36:08 +00:00
2019-04-25 19:33:34 +02:00
2022-11-04 16:56:41 +01:00
2022-08-11 10:31:19 -07:00
2022-12-22 18:18:37 -08:00
2020-07-13 17:01:44 -07:00
2022-10-31 07:29:47 -04:00
2020-08-12 10:58:00 -07:00
2019-03-07 18:32:01 -08:00
2021-05-19 11:40:15 +02:00
2021-02-06 09:22:10 +01:00
2021-02-06 09:22:10 +01:00
2019-01-04 13:13:47 -08:00
2021-02-15 18:28:30 +01:00
2021-04-02 11:18:30 -06:00
2022-06-28 21:26:05 +02:00
2022-12-08 18:25:31 -08:00
2019-07-25 11:05:10 +02:00
2022-06-07 10:20:42 -07:00
2022-12-05 18:00:58 +01:00
2022-12-05 18:00:59 +01:00
2022-05-18 00:11:18 +08:00
2022-09-15 09:08:09 +02:00
2022-11-05 01:25:57 -04:00
2021-01-12 17:31:14 +01:00
2022-05-15 18:31:28 -06:00
2022-09-24 08:50:04 +02:00
2022-09-24 08:50:04 +02:00
2020-10-29 18:39:43 -07:00
2019-10-09 22:31:14 -04:00
2020-12-04 12:06:15 +01:00
2019-07-16 19:23:23 -07:00
2019-09-25 17:51:39 -07:00
2021-11-26 16:48:59 +01:00
2022-06-28 21:26:05 +02:00
2020-12-15 12:13:36 -08:00
2020-09-17 18:46:04 +02:00
2022-09-30 14:32:35 +02:00
2019-08-02 14:44:02 +10:00
2022-12-06 14:36:02 -08:00
2022-01-26 14:49:46 +01:00
2022-06-28 21:26:05 +02:00
2022-11-03 15:16:50 +01:00
2022-12-07 20:09:18 -08:00
2021-10-18 12:28:53 -07:00
2022-08-23 14:54:54 -05:00
2022-08-02 19:50:47 -07:00
2022-06-28 21:26:05 +02:00
2022-06-20 18:21:25 +02:00
2019-12-17 21:37:40 +05:30
2018-10-04 09:40:52 -07:00
2021-03-18 17:03:54 +01:00
2022-08-29 15:32:13 +02:00
2022-06-03 20:09:27 +08:00
2022-10-25 15:17:23 -07:00
2020-07-19 19:20:22 -07:00
2022-12-05 17:25:00 -08:00
2022-11-17 19:26:02 -08:00
2022-11-21 07:45:29 -07:00
2022-11-28 12:46:23 -08:00
2022-08-02 19:50:47 -07:00
2022-04-04 08:55:23 +02:00
2023-01-18 17:12:37 -08:00
2021-04-20 08:59:03 -06:00
2020-05-12 19:34:52 +03:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2019-03-27 13:30:07 -07:00
2020-07-06 21:37:08 -07:00
2022-06-28 21:26:05 +02:00
2022-12-01 19:58:50 -08:00
2022-02-21 19:38:17 +10:30
2021-01-27 15:13:52 +01:00
2022-02-17 09:09:37 +01:00
2021-02-07 14:51:19 -08:00
2022-11-23 09:10:50 +01:00
2021-10-07 13:51:11 +02:00
2019-11-05 18:20:55 -08:00
2022-08-10 13:49:50 +01:00
2021-02-08 13:01:24 +01:00
2022-05-04 11:06:13 +02:00
2019-09-04 12:43:54 +02:00
2022-03-11 08:28:05 -08:00
2018-11-16 14:09:40 +08:00
2022-09-20 11:53:32 +01:00
2020-11-27 15:48:31 +01:00
2020-07-27 12:20:40 -07:00
2022-02-18 13:08:18 +00:00
2021-11-15 07:53:10 -08:00
2021-11-15 07:53:10 -08:00
2021-06-03 15:31:34 -07:00
2021-03-30 13:29:39 -07:00
2022-11-14 03:56:37 +05:30
2022-02-18 21:20:06 -08:00
2022-10-28 12:36:34 +08:00
2022-06-28 21:26:05 +02:00
2021-07-29 15:06:50 +01:00
2021-05-07 00:26:34 -07:00
2022-12-12 15:33:37 -08:00
2022-09-15 09:08:09 +02:00
2021-03-10 12:45:16 -08:00
2022-11-03 20:48:37 -07:00
2022-08-18 20:37:35 -07:00
2022-10-28 22:00:49 -07:00
2020-08-22 12:44:37 -07:00
2022-06-28 21:26:05 +02:00
2022-12-12 09:29:56 +00:00
2022-03-11 08:28:27 -08:00
2019-04-19 13:58:17 -07:00
2020-05-01 12:24:40 -07:00
2020-07-13 15:32:56 -07:00
2020-04-20 12:43:24 -07:00
2022-06-28 21:26:05 +02:00
2021-07-21 08:14:33 -07:00
2022-11-03 13:44:46 +01:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2022-11-22 17:50:36 -08:00
2022-07-17 07:52:46 -07:00
2022-12-27 07:32:51 -07:00
2021-07-21 08:14:33 -07:00
2022-02-04 20:24:45 -08:00
2021-07-21 08:14:33 -07:00
2022-02-28 13:25:48 +01:00
2022-11-30 20:16:49 -04:00
2021-08-18 07:23:15 -06:00
2022-06-28 21:26:05 +02:00
2022-11-17 10:42:45 +01:00
2019-07-25 11:05:10 +02:00
2020-09-15 09:57:45 -05:00
2022-10-17 09:51:26 -05:00
2021-10-05 06:54:16 -05:00
2022-11-17 10:42:45 +01:00
2022-06-28 21:26:05 +02:00
2020-07-27 16:34:12 +03:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2020-11-16 16:27:03 +01:00
2019-03-05 21:07:14 -08:00
2020-12-15 12:13:36 -08:00
2022-06-03 20:09:27 +08:00
2020-11-04 16:43:38 +01:00
2020-05-19 15:19:06 +01:00
2022-07-12 16:50:44 -04:00
2022-01-11 15:44:27 -05:00
2021-06-17 14:25:39 -04:00
2022-12-27 06:01:49 -05:00
2022-09-20 09:13:38 +02:00
2022-10-19 09:01:44 +02:00
2019-03-07 18:31:59 -08:00
2022-05-25 09:51:36 -07:00
2022-07-08 10:46:53 -07:00
2022-05-10 06:30:05 -06:00
2022-08-29 10:44:08 +02:00
2022-08-02 12:34:03 -04:00
2021-03-10 09:34:06 +01:00
2021-03-24 08:26:29 +01:00
2021-10-21 23:36:28 +02:00
2022-02-09 12:00:11 +00:00
2022-05-01 17:45:35 +01:00
2022-10-25 14:38:31 +03:00
2022-04-24 08:27:37 +01:00
2020-08-18 15:44:44 +02:00
2020-09-25 14:23:27 +02:00
2023-01-18 17:12:37 -08:00
2021-09-03 09:58:17 -07:00
2020-05-06 17:45:45 -07:00
2022-06-28 21:26:05 +02:00
2020-09-15 22:13:31 +10:00
2022-01-11 18:45:02 -08:00
2021-07-26 14:45:18 +02:00
2022-12-01 20:06:06 -08:00
2022-02-19 16:05:54 +00:00
2020-09-10 12:25:51 -07:00
2021-01-23 12:38:42 -08:00
2019-01-04 13:13:47 -08:00
2019-11-15 14:38:29 +01:00
2021-06-30 15:34:04 -06:00
2018-11-17 21:09:49 -08:00
2022-06-28 21:26:05 +02:00
2022-11-03 20:46:32 -07:00
2022-06-28 21:26:05 +02:00
2018-11-27 16:20:20 -08:00
2022-12-08 19:49:21 -08:00
2021-06-18 13:02:45 -07:00
2018-10-25 10:25:22 +02:00
2018-12-01 12:38:32 +01:00
2018-12-01 12:38:32 +01:00
2022-09-07 16:46:03 +02:00
2022-11-18 18:36:54 -08:00
2021-03-11 16:12:59 -08:00
2021-12-27 14:58:37 +00:00
2021-01-25 09:36:25 -05:00
2022-02-25 18:50:12 -05:00
2022-03-13 12:59:35 -04:00
2019-04-25 14:18:14 -04:00
2020-10-02 09:37:41 -04:00
2019-07-12 11:05:40 -07:00
2021-09-14 11:11:20 +02:00
2021-10-21 17:25:17 +02:00
2022-10-07 15:27:40 +02:00
2022-05-20 06:17:33 -06:00
2022-02-27 10:58:04 -08:00
2021-01-04 11:42:26 -05:00
2022-12-09 10:43:46 +00:00
2022-12-14 09:54:10 -08:00
2021-07-06 10:37:46 -05:00
2022-10-27 10:27:32 +02:00
2021-12-23 09:32:51 +01:00
2021-12-27 17:12:58 +01:00
2019-10-02 20:32:27 -06:00
2020-09-04 12:34:50 +02:00
2022-09-20 09:13:38 +02:00
2022-09-29 18:52:05 -07:00
2023-01-04 14:44:13 -07:00
2019-01-22 10:21:45 +01:00
2019-07-30 20:34:34 +02:00
2019-12-01 14:00:59 -08:00
2020-12-21 17:36:48 -08:00
2022-12-01 03:22:20 +00:00
2022-04-22 18:50:54 +01:00
2021-03-25 15:31:22 -07:00
2023-01-06 17:12:39 +00:00
2020-04-30 15:19:33 +10:00
2020-07-19 19:22:56 -07:00
2022-03-18 09:44:19 -05:00
2022-06-28 21:26:05 +02:00
2020-06-25 16:26:25 -07:00
2022-02-17 09:09:38 +01:00
2020-08-04 20:16:37 -07:00
2021-12-10 17:10:55 -08:00
2022-05-09 14:00:07 +02:00
2022-09-24 08:31:54 +02:00
2022-06-28 21:26:05 +02:00
2020-03-29 22:30:57 -07:00
2021-01-25 15:14:16 -08:00
2020-11-24 10:10:59 -06:00
2022-03-13 11:49:53 -05:00
2022-02-02 13:11:34 +01:00
2022-03-23 19:58:40 +01:00
2022-06-28 21:26:05 +02:00
2020-10-05 16:35:57 +01:00
2019-12-04 19:44:12 -08:00
2020-02-12 17:57:51 -05:00
2022-06-28 21:26:05 +02:00
2022-05-03 14:11:58 -07:00
2022-12-08 09:17:45 -07:00
2022-08-03 16:29:08 -07:00
2022-09-20 12:33:22 +02:00
2022-06-28 21:26:05 +02:00
2019-11-15 14:38:29 +01:00
2022-07-16 08:16:01 +02:00
2022-06-27 14:41:31 +02:00
2022-11-03 03:43:05 +01:00
2020-03-24 15:59:34 -07:00
2022-04-07 16:47:12 +02:00
2019-11-15 14:38:29 +01:00
2021-05-18 16:20:54 -05:00
2022-02-02 07:42:41 -08:00
2022-07-18 11:19:17 +01:00
2022-10-28 10:47:42 +01:00
2020-02-27 18:50:19 -08:00
2022-06-01 16:48:05 -07:00
2019-04-19 14:07:40 -07:00
2022-01-08 17:41:00 +09:00
2022-09-11 19:47:04 -05:00
2022-03-31 13:04:44 -07:00
2022-06-28 21:26:05 +02:00
2022-11-09 14:06:51 +01:00
2020-01-15 11:00:39 -06:00
2022-06-30 13:14:35 +02:00
2022-06-28 21:26:05 +02:00
2022-06-01 15:55:25 -07:00
2022-10-28 10:47:42 +01:00
2022-11-17 11:04:23 -08:00
2022-04-26 10:17:03 +02:00
2021-01-07 16:17:32 +01:00
2022-02-03 19:50:49 +01:00
2019-12-18 18:07:33 +01:00
2020-02-21 11:22:15 -08:00
2019-12-18 18:07:33 +01:00
2022-04-06 13:48:02 +01:00
2020-09-18 13:58:37 -07:00
2020-09-18 13:58:37 -07:00
2022-09-27 17:29:09 -07:00
2021-04-10 10:36:34 +02:00
2022-06-27 16:25:41 +02:00
2022-05-25 10:08:59 -07:00
2022-09-23 19:09:56 -06:00
2019-12-09 09:59:07 +01:00
2020-03-29 23:29:08 +02:00
2019-05-22 10:36:35 -07:00
2022-06-28 21:26:05 +02:00
2022-08-31 09:07:53 +02:00
2022-09-11 20:25:48 -07:00
2019-11-15 14:38:29 +01:00
2022-01-20 08:52:54 +02:00
2021-03-22 10:24:07 +01:00
2022-12-07 17:58:46 +01:00
2022-12-07 17:58:46 +01:00
2022-12-07 17:58:46 +01:00
2022-12-07 17:58:46 +01:00
2022-12-07 17:58:46 +01:00
2020-07-10 13:45:32 +02:00
2020-07-10 13:45:32 +02:00
2022-12-28 05:09:46 -05:00
2022-08-11 04:26:08 -04:00
2020-06-03 11:27:43 +02:00
2022-07-11 09:54:37 +02:00
2022-12-06 12:36:43 -07:00
2022-08-12 09:50:34 -07:00
2022-08-11 04:31:15 -04:00
2022-11-25 11:01:29 +00:00
2022-06-28 21:26:05 +02:00
2020-08-05 09:30:20 -04:00
2022-10-07 09:32:41 -04:00
2022-12-12 14:19:23 -08:00
2022-08-11 04:06:40 -04:00
2020-08-05 11:08:39 -04:00
2022-03-28 16:52:58 -04:00
2020-09-10 11:39:22 +02:00
2021-11-04 16:36:54 +01:00
2021-09-29 09:22:29 +02:00
2021-11-01 05:26:48 -04:00
2022-05-10 07:22:28 -04:00
2020-08-05 11:08:40 -04:00
2021-12-06 15:03:05 +01:00
2021-11-10 15:32:38 +01:00
2020-09-10 10:05:58 +02:00
2022-12-12 09:29:56 +00:00
2022-08-11 04:06:40 -04:00
2021-08-26 22:28:03 +02:00
2020-08-05 11:08:40 -04:00
2022-08-16 01:40:24 -04:00
2021-08-05 10:24:08 +01:00
2020-08-05 11:08:40 -04:00
2021-03-07 09:07:16 +01:00
2021-09-05 16:23:09 -04:00
2021-10-08 16:21:53 +01:00
2019-07-25 11:05:10 +02:00
2019-08-01 21:49:46 +02:00
2020-05-19 15:19:06 +01:00
2019-12-16 19:22:22 -08:00
2020-07-31 09:24:23 +02:00
2019-07-25 11:05:10 +02:00
2021-06-12 13:16:45 -07:00
2020-06-12 13:23:34 -04:00
2020-07-13 15:32:56 -07:00
2022-12-05 10:30:47 +01:00
105ff5339f