Re: [PATCH] tomoyo: Add a kernel config option for fuzzing testing.
From: James Morris <jmorris@namei.org>
Date: 2019-03-12 18:22:01
On Thu, 28 Feb 2019, Tetsuo Handa wrote:
syzbot is reporting kernel panic triggered by memory allocation fault injection before loading TOMOYO's policy [1]. To make the fuzzing tests useful, we need to assign a profile other than "disabled" (no-op) mode. Therefore, let's allow syzbot to load TOMOYO's built-in policy for "learning" mode using a kernel config option. This option must not be enabled for kernels built for production system, for this option also disables domain/program checks when modifying policy configuration via /sys/kernel/security/tomoyo/ interface.
I don't understand the logic here. If the cause of this is no policy loaded combined with running out of memory, shouldn't the no-policy issue be dealt with earlier? -- James Morris [off-list ref]