Re: [PATCH v6 1/8] security: Add LSM hook at the point where a task gets a... | linux-security-module

[PATCH v6 0/8] Fork brute force attack mitigation · John Wood <hidden> · 2021-03-07
[PATCH v6 1/8] security: Add LSM hook at the point where a task gets a fatal signal · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 1/8] security: Add LSM hook at the point where a task gets a fatal signal · Kees Cook <hidden> · 2021-03-18
[PATCH v6 2/8] security/brute: Define a LSM and manage statistical data · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 2/8] security/brute: Define a LSM and manage statistical data · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 2/8] security/brute: Define a LSM and manage statistical data · John Wood <hidden> · 2021-03-20
Re: [PATCH v6 2/8] security/brute: Define a LSM and manage statistical data · Kees Cook <hidden> · 2021-03-21
[PATCH v6 3/8] securtiy/brute: Detect a brute force attack · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · John Wood <hidden> · 2021-03-20
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · Kees Cook <hidden> · 2021-03-21
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · John Wood <hidden> · 2021-03-21
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · Kees Cook <hidden> · 2021-03-21
Re: [PATCH v6 3/8] securtiy/brute: Detect a brute force attack · John Wood <hidden> · 2021-03-22
[PATCH v6 4/8] security/brute: Fine tuning the attack detection · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 4/8] security/brute: Fine tuning the attack detection · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 4/8] security/brute: Fine tuning the attack detection · John Wood <hidden> · 2021-03-20
Re: [PATCH v6 4/8] security/brute: Fine tuning the attack detection · Kees Cook <hidden> · 2021-03-21
[PATCH v6 5/8] security/brute: Mitigate a brute force attack · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 5/8] security/brute: Mitigate a brute force attack · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 5/8] security/brute: Mitigate a brute force attack · John Wood <hidden> · 2021-03-20
Re: [PATCH v6 5/8] security/brute: Mitigate a brute force attack · Kees Cook <hidden> · 2021-03-21
[PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM · John Wood <hidden> · 2021-03-20
[PATCH v6 7/8] Documentation: Add documentation for the Brute LSM · John Wood <hidden> · 2021-03-07
Re: [PATCH v6 7/8] Documentation: Add documentation for the Brute LSM · Kees Cook <hidden> · 2021-03-18
Re: [PATCH v6 7/8] Documentation: Add documentation for the Brute LSM · John Wood <hidden> · 2021-03-20
Re: [PATCH v6 7/8] Documentation: Add documentation for the Brute LSM · Jonathan Corbet <corbet@lwn.net> · 2021-03-21
Re: [PATCH v6 7/8] Documentation: Add documentation for the Brute LSM · John Wood <hidden> · 2021-03-26
[PATCH v6 8/8] MAINTAINERS: Add a new entry for the Brute LSM · John Wood <hidden> · 2021-03-07

Re: [PATCH v6 1/8] security: Add LSM hook at the point where a task gets a fatal signal

From: Kees Cook <hidden>
Date: 2021-03-18 01:23:25
Also in: linux-doc, linux-kselftest, lkml

On Sun, Mar 07, 2021 at 12:30:24PM +0100, John Wood wrote:

Add a security hook that allows a LSM to be notified when a task gets a
fatal signal. This patch is a previous step on the way to compute the
task crash period by the "brute" LSM (linux security module to detect
and mitigate fork brute force attack against vulnerable userspace
processes).

Signed-off-by: John Wood <redacted>

I continue to really like that this entire thing can be done from an LSM
with just this one extra hook. :)

Reviewed-by: Kees Cook <redacted>

-- 
Kees Cook

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help