diff options
| author | Dmitry Vyukov <dvyukov@google.com> | 2018-04-02 20:10:48 +0200 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2018-04-02 20:10:48 +0200 |
| commit | 676bd07e7e80f8a270af7f0276443c68f4a99e25 (patch) | |
| tree | 97d09aa6c4f6634165d8d12543ec83af7efb46e7 /executor/common_linux.h | |
| parent | 3e679c51c03ac13a5b4b601873689925eda3cc16 (diff) | |
sys/linux: test various binfmt's in execve
Diffstat (limited to 'executor/common_linux.h')
| -rw-r--r-- | executor/common_linux.h | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/executor/common_linux.h b/executor/common_linux.h index 297253faa..cb1d79c88 100644 --- a/executor/common_linux.h +++ b/executor/common_linux.h @@ -1084,6 +1084,18 @@ static void setup_cgroups() debug("chmod(/syzcgroup/net) failed: %d\n", errno); } } + +// TODO(dvyukov): this should be under a separate define for separate minimization, +// but for now we bundle this with cgroups. +static void setup_binfmt_misc() +{ + if (!write_file("/proc/sys/fs/binfmt_misc/register", ":syz0:M:0:syz0::./file0:")) { + debug("write(/proc/sys/fs/binfmt_misc/register, syz0) failed: %d\n", errno); + } + if (!write_file("/proc/sys/fs/binfmt_misc/register", ":syz1:M:1:yz1::./file0:POC")) { + debug("write(/proc/sys/fs/binfmt_misc/register, syz1) failed: %d\n", errno); + } +} #endif #if defined(SYZ_EXECUTOR) || defined(SYZ_SANDBOX_NONE) || defined(SYZ_SANDBOX_SETUID) || defined(SYZ_SANDBOX_NAMESPACE) @@ -1156,6 +1168,7 @@ static int do_sandbox_none(void) #if defined(SYZ_EXECUTOR) || defined(SYZ_ENABLE_CGROUPS) setup_cgroups(); + setup_binfmt_misc(); #endif sandbox_common(); if (unshare(CLONE_NEWNET)) { @@ -1185,6 +1198,7 @@ static int do_sandbox_setuid(void) #if defined(SYZ_EXECUTOR) || defined(SYZ_ENABLE_CGROUPS) setup_cgroups(); + setup_binfmt_misc(); #endif sandbox_common(); if (unshare(CLONE_NEWNET)) @@ -1335,6 +1349,7 @@ static int do_sandbox_namespace(void) #if defined(SYZ_EXECUTOR) || defined(SYZ_ENABLE_CGROUPS) setup_cgroups(); + setup_binfmt_misc(); #endif real_uid = getuid(); real_gid = getgid(); |