[CRIU] [PATCH] test: add cow01 into TEST_SUID_LIST

Andrey Vagin avagin at openvz.org
Fri Mar 20 23:35:31 PDT 2015


cow01 uses /proc/pid/pagemap which has been protected by
CAP_SYS_ADMIN.

"""
	commit	ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce
	pagemap: do not leak physical addresses to non-privileged userspace

	As pointed by recent post[1] on exploiting DRAM physical imperfection,
	/proc/PID/pagemap exposes sensitive information which can be used to do
	attacks.
"""

Signed-off-by: Andrey Vagin <avagin at openvz.org>
---
 test/zdtm.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/zdtm.sh b/test/zdtm.sh
index 878bfae..fbea258 100755
--- a/test/zdtm.sh
+++ b/test/zdtm.sh
@@ -322,6 +322,7 @@ mntns_shared_bind
 mntns_shared_bind02
 mntns_root_bind
 sockets00
+cow01
 "
 
 CRIU_CPT=$CRIU
-- 
2.1.0



More information about the CRIU mailing list