Re: [PATCH] tomoyo: Add a kernel config option for fuzzing testing.
From: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Date: 2019-03-04 13:36:02
James, please include this patch for 5.1-rc1, for failing to include this patch will prevent various trees (SELinux/Smack/AppArmor) from proper testing due to this problem because syzbot is enabling both TOMOYO and one of SELinux/Smack/AppArmor via lsm= boot parameter. By including this patch and building kernels with this config option enabled, syzbot will be able to continue proper testing. On 2019/02/28 23:06, Tetsuo Handa wrote:
syzbot is reporting kernel panic triggered by memory allocation fault injection before loading TOMOYO's policy [1]. To make the fuzzing tests useful, we need to assign a profile other than "disabled" (no-op) mode. Therefore, let's allow syzbot to load TOMOYO's built-in policy for "learning" mode using a kernel config option. This option must not be enabled for kernels built for production system, for this option also disables domain/program checks when modifying policy configuration via /sys/kernel/security/tomoyo/ interface. [1] https://syzkaller.appspot.com/bug?extid=29569ed06425fcf67a95 Reported-by: syzbot <redacted> Reported-by: syzbot <redacted> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> --- security/tomoyo/Kconfig | 10 ++++++++++ security/tomoyo/common.c | 13 ++++++++++++- 2 files changed, 22 insertions(+), 1 deletion(-)