syzkaller/executor
Dmitry Vyukov f3ad684464 executor: drop CAP_SYS_NICE
A process with CAP_SYS_NICE can bring kernel down by asking for too high SCHED_DEADLINE priority,
as the result rcu and other system services that use kernel threads will stop functioning.
Some parameters for SCHED_DEADLINE should be OK, but we don't have means to enforce
values of indirect syscall arguments. Peter Zijlstra proposed sysctl_deadline_period_{min,max}
which could be used to enfore safe limits without droppping CAP_SYS_NICE, but we don't have it yet.
See the following bug for details:
https://groups.google.com/forum/#!topic/syzkaller-bugs/G6Wl_PKPIWI
2019-07-22 11:59:00 +02:00
..
common_akaros.h executor: fix do_sandbox_none on akaros and test 2019-01-31 11:35:53 +01:00
common_bsd.h executor: add network packet injection for NetBSD 2019-07-14 17:59:29 +03:00
common_fuchsia.h sys/fuchsia: update zx_clock_get syscall (#1292) 2019-07-16 17:09:43 -07:00
common_kvm_amd64.h executor: prevent non-null expected warnings 2019-03-21 13:27:41 +01:00
common_kvm_arm64.h executor: prevent non-null expected warnings 2019-03-21 13:27:41 +01:00
common_linux.h executor: drop CAP_SYS_NICE 2019-07-22 11:59:00 +02:00
common_test.h executor: prevent non-null expected warnings 2019-03-21 13:27:41 +01:00
common_usb.h sys/linux, executor: improve USB descriptions 2019-07-16 13:07:56 +02:00
common_windows.h executor: fix do_sandbox_none on akaros and test 2019-01-31 11:35:53 +01:00
common.h executor: make errors during thread creation exit zero 2019-07-04 20:26:46 +02:00
defs.h sys/linux: improve sched_attr description 2019-07-22 11:51:58 +02:00
executor_akaros.h executor: change syscall argument type to intptr_t 2019-05-07 08:48:35 +02:00
executor_bsd.h pkg/report: use cover protect on NetBSD also 2019-06-13 18:26:11 +02:00
executor_fuchsia.h executor: special-case zx_deadline_after return value 2019-06-04 14:57:43 +02:00
executor_linux.h executor: Protect the coverage buffer 2019-06-04 16:24:36 +02:00
executor_test.h executor: change syscall argument type to intptr_t 2019-05-07 08:48:35 +02:00
executor_windows.h executor: change syscall argument type to intptr_t 2019-05-07 08:48:35 +02:00
executor.cc sys/linux, executor: add syz_usb_ep_read syzkall 2019-07-01 17:26:35 +02:00
gen.go executor: disable gen.go for NetBSD 2019-01-10 12:50:45 +01:00
kvm_gen.cc executor: remove unused kvm_asm64_vm86 2019-01-17 10:52:20 +01:00
kvm.h sys: improve kvm description 2017-01-28 19:58:31 +01:00
kvm.S executor: remove unused kvm_asm64_vm86 2019-01-17 10:52:20 +01:00
kvm.S.h executor: remove unused kvm_asm64_vm86 2019-01-17 10:52:20 +01:00
nocover.h executor: Protect the coverage buffer 2019-06-04 16:24:36 +02:00
stub.go Makefile: actually cross-compile during presubmit 2017-06-26 15:45:51 +02:00
syscalls.h sys/fuchsia: update zx_clock_get syscall (#1292) 2019-07-16 17:09:43 -07:00
test_linux.h executor: overhaul 2018-07-24 12:04:27 +02:00
test.h executor: fix handling of big-endian bitfields 2018-12-08 19:08:08 +01:00