Kees Cook ef3e787c21 usercopy: Disable CONFIG_HARDENED_USERCOPY_PAGESPAN ...

CONFIG_HARDENED_USERCOPY_PAGESPAN has been mostly broken for a while,
and it has become hard to ignore with some recent scsi changes[1].
While there is a more complete series to replace it with better checks[2],
it should have more soak time in -next. Instead, disable the config now,
with the expectation that it will be fully replaced in the next kernel
release.

[1] https://lore.kernel.org/lkml/20220324064846.GA12961@lst.de/
[2] https://lore.kernel.org/linux-hardening/20220110231530.665970-1-willy@infradead.org/

Suggested-by: Christoph Hellwig <hch@lst.de>
Cc: "Matthew Wilcox (Oracle)" <willy@infradead.org>
Signed-off-by: Kees Cook <keescook@chromium.org>

2022-03-24 15:57:25 -07:00

..

apparmor

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

bpf

bpf: Implement task local storage

2020-11-06 08:08:37 -08:00

integrity

Merge tag 'integrity-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2022-01-11 13:11:10 -08:00

keys

security: DH - use KDF implementation from crypto API

2021-11-26 16:25:17 +11:00

landlock

landlock: Enable user space to infer supported features

2021-04-22 12:22:11 -07:00

loadpin

LSM: Add "contents" flag to kernel_read_file hook

2020-10-05 13:37:03 +02:00

lockdown

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2020-06-02 17:36:24 -07:00

safesetid

LSM: SafeSetID: Mark safesetid_initialized as __initdata

2021-06-10 09:52:32 -07:00

selinux

Merge tag 'selinux-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

2022-01-11 13:03:06 -08:00

smack

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

tomoyo

tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()

2021-12-15 20:13:55 +09:00

yama

task_work: cleanup notification modes

2020-10-17 15:05:30 -06:00

commoncap.c

fs: support mapped mounts of mapped filesystems

2021-12-05 10:28:57 +01:00

device_cgroup.c

add missing bpf-cgroup.h includes

2021-12-16 14:57:09 -08:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

usercopy: Disable CONFIG_HARDENED_USERCOPY_PAGESPAN

2022-03-24 15:57:25 -07:00

Kconfig.hardening

gcc-plugins/stackleak: Provide verbose mode

2022-02-06 10:49:57 -08:00

lsm_audit.c

lsm_audit: avoid overloading the "key" audit field

2021-09-19 22:47:04 -04:00

Makefile

security: remove unneeded subdir-$(CONFIG_...)

2021-09-03 08:17:20 +09:00

min_addr.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

security.c

Merge tag 'fixes-v5.17-lsm-ceph-null' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2022-01-29 08:52:27 +02:00