From patchwork Mon Jan 8 18:35:01 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kees Cook X-Patchwork-Id: 186098 Return-Path: Delivered-To: ouuuleilei@gmail.com Received: by 2002:a05:7300:37c1:b0:101:2151:f287 with SMTP id y1csp1203984dyq; Mon, 8 Jan 2024 10:37:41 -0800 (PST) X-Google-Smtp-Source: AGHT+IFdrV+W0l1x/NqaAM17AuEJ+HniWlbUQ0rmx57g3Nhry8VNT2wNztNp1PWMrtJYtlMviHwG X-Received: by 2002:a05:620a:4509:b0:781:56a7:3841 with SMTP id t9-20020a05620a450900b0078156a73841mr301253qkp.77.1704739060941; Mon, 08 Jan 2024 10:37:40 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1704739060; cv=none; d=google.com; s=arc-20160816; b=Up2jkR6a3BXUCIM91RaITk8l96Mq5UiFd5OIJwZZBOPVKsgwZjrHGNoK+Qit/OM8ji 8LzzAq7XOPXfF/BhMh5Ys4u1/lHwnYfTApruj0aDWTPvmtZn6SK6gErHVdnX6Pr/I7W7 MmbRq2hRPs6WKrjcqqWleNBR9Wi55kDUpm0za7ReXP7ytWJ/B1b2Ggcod5ggNBbmDcK9 1fCVwB0XBsr+saIaKFEtdkFm+O1lGNCIb2grgwMWYqTBkv10atuVZmSvdyCy0cq8WcY9 OWRw/GaWgkvrYWWMfjA31QCv78rNYl7m5YU01FfmsV8QueFPRt8hhxCc1/dvmypE21lb l5QQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:mime-version:list-unsubscribe:list-subscribe :list-id:precedence:message-id:subject:cc:to:from:date :dkim-signature; bh=unPpQVTDeVqN66DKJjPl4haWBetUrrskmet/dbbnct8=; fh=uh3iMsFDHVFQioOVRNFq/bTuzydBg5olMomLFhhqxjA=; b=mQohJDusdjcWDLsXuNObHlS5XFIY52++YbfdB2h+3BZ+0hR8Z1svF0MP58c5A6R9TN 6RYEGD7QCDO37vdvF20/s5vHXqw/i+jlT00Pj3b+Nt6vDCzJoTLkstW6pJdwPnxoXRQY zLgXysY0YHhNmSAMnqh59M2ncjfnGRdfCgqLEbW1cxQsNYZIQ0uNOwo4fGVzOdj5J1Uy nBl5l92qsAv7ejvx1vLmxNdTXLORDRNOJkoDeBVmsiD2TjM1l6SXMYqAxWrF+GuD8GGF c0pP7Fu6YuwXgcmhT9wc07Tw3txJ7xfCJBD+pKh+kc8xe8gpzWV2YN99sgXlDURK9Ckg Rnnw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=gB0maOuK; spf=pass (google.com: domain of linux-kernel+bounces-19974-ouuuleilei=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-19974-ouuuleilei=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [2604:1380:45d1:ec00::1]) by mx.google.com with ESMTPS id v7-20020a05620a0f0700b0078320a85898si290957qkl.295.2024.01.08.10.37.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 08 Jan 2024 10:37:40 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-19974-ouuuleilei=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) client-ip=2604:1380:45d1:ec00::1; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=gB0maOuK; spf=pass (google.com: domain of linux-kernel+bounces-19974-ouuuleilei=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-19974-ouuuleilei=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id B1EA81C22EF2 for ; Mon, 8 Jan 2024 18:37:40 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 35F3657327; Mon, 8 Jan 2024 18:35:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="gB0maOuK" X-Original-To: linux-kernel@vger.kernel.org Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 33D6957302 for ; Mon, 8 Jan 2024 18:35:02 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=chromium.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=chromium.org Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-28c0df4b42eso2070988a91.1 for ; Mon, 08 Jan 2024 10:35:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1704738902; x=1705343702; darn=vger.kernel.org; h=content-disposition:mime-version:message-id:subject:cc:to:from:date :from:to:cc:subject:date:message-id:reply-to; bh=unPpQVTDeVqN66DKJjPl4haWBetUrrskmet/dbbnct8=; b=gB0maOuKH9EYBK20PGbJ1ou6i9UFFJODNOAnMhE4erZqK30iZZAQICGfeUnxMGX2Tg fcgkDs6VVv8LCRGoxpr2Y2hJpi4x/PLKPY+ZgN1hOI2qA2sFPnWRfc4kvvWGnQ89+QRa 8Zs5Rp9tRK6kg2lvjvyf0LhOTFoMtIbMrtPGs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704738902; x=1705343702; h=content-disposition:mime-version:message-id:subject:cc:to:from:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=unPpQVTDeVqN66DKJjPl4haWBetUrrskmet/dbbnct8=; b=gK8E3KucVj94DZ107Hp0mNgMPPIfgOFBikoBHVDHBzk19CDScQZnnZ14eeGh1TW3Qj dsrxOUrWjJVhRfWutbZFx5Vp8QSJwGGUEZPvo3BUudPhC+XrqTBBN2TZiUFSWTHwvLcG f5vB8VKsbt70JrhHWHmHCmMeBamtwvXDVssU9UDwcsso9J5bW2wse8CJ8E+S+zqRYEba XY2j65lp1QQlnMqb10OoMyykEnUQodiW4j4eAYjrSK5Gz9+IVcChNeUZK00JtNJ927sI GRWyE0HVTli3QH9GVElIeC+i+pqtwPEGikcTvzHZ1xuXZV9Yj4amR2KyOUNugz+QEN8i n4lA== X-Gm-Message-State: AOJu0YyavOXAAaGwrIbhtEXbOhbdXYjQFbc5s7Mg/TgCplGxcpm8xfZf 8lZGw9v3WbkJYJP5vg6c227qUfw95AwP X-Received: by 2002:a17:90b:1b50:b0:28b:c02a:d0e2 with SMTP id nv16-20020a17090b1b5000b0028bc02ad0e2mr186788pjb.18.1704738902366; Mon, 08 Jan 2024 10:35:02 -0800 (PST) Received: from www.outflux.net (198-0-35-241-static.hfc.comcastbusiness.net. [198.0.35.241]) by smtp.gmail.com with ESMTPSA id sz15-20020a17090b2d4f00b0028c940cdad8sm6867394pjb.5.2024.01.08.10.35.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 08 Jan 2024 10:35:01 -0800 (PST) Date: Mon, 8 Jan 2024 10:35:01 -0800 From: Kees Cook To: Linus Torvalds Cc: linux-kernel@vger.kernel.org, Alexey Dobriyan , Josh Triplett , Kees Cook Subject: [GIT PULL] execve updates for v6.8-rc1 Message-ID: <202401081028.0E908F9E0A@keescook> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Disposition: inline X-getmail-retrieved-from-mailbox: INBOX X-GMAIL-THRID: 1787548465421087826 X-GMAIL-MSGID: 1787548465421087826 Hi Linus, Please pull these execve updates for v6.8-rc1. A fast-fail check has been added to dramatically speed up execve-based PATH searches, and has been in -next for the entire development window. A minor conflict with netdev exists due to neighboring MAINTAINERS entries: https://lore.kernel.org/linux-next/20231218161704.05c25766@canb.auug.org.au/ Thanks! -Kees The following changes since commit 21ca59b365c091d583f36ac753eaa8baf947be6f: binfmt_misc: enable sandboxed mounts (2023-10-11 08:46:01 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/execve-v6.8-rc1 for you to fetch changes up to 0a8a952a75f2c5c140939c1616423e240677666c: ELF, MAINTAINERS: specifically mention ELF (2023-12-06 14:55:31 -0800) ---------------------------------------------------------------- execve updates for v6.8-rc1 - Update MAINTAINERS entry to explicitly mention ELF (Alexey Dobriyan) - Add a fail-fast check to speed up execve-based PATH searches (Josh Triplett) ---------------------------------------------------------------- Alexey Dobriyan (1): ELF, MAINTAINERS: specifically mention ELF Josh Triplett (1): fs/exec.c: Add fast path for ENOENT on PATH search before allocating mm MAINTAINERS | 3 ++- fs/exec.c | 13 +++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-)