diff options
| author | Dmitry Vyukov <dvyukov@google.com> | 2020-05-04 09:21:34 +0200 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2020-05-04 20:56:20 +0200 |
| commit | 71db69869e82cce9af00f8660c6e867936b19212 (patch) | |
| tree | cf59b7d7d6173ea870e9197df2b9b0b8be1dfa26 /sys/linux/dev_ptmx.txt | |
| parent | a4d38b39a8e23244bea7a53e9d7a759474f85dae (diff) | |
sys/linux: mark some ioctls as disabled
Mark ioctls we disable in init.go as disabled.
Update #477
Update #502
Diffstat (limited to 'sys/linux/dev_ptmx.txt')
| -rw-r--r-- | sys/linux/dev_ptmx.txt | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/sys/linux/dev_ptmx.txt b/sys/linux/dev_ptmx.txt index 31277fe38..a03b24c58 100644 --- a/sys/linux/dev_ptmx.txt +++ b/sys/linux/dev_ptmx.txt @@ -136,8 +136,17 @@ ioctl$TIOCL_GETKMSGREDIRECT(fd fd_tty, cmd const[TIOCLINUX], arg ptr[in, const[T ioctl$TIOCL_SCROLLCONSOLE(fd fd_tty, cmd const[TIOCLINUX], arg ptr[in, tioctl_scroll_console]) ioctl$TIOCL_BLANKSCREEN(fd fd_tty, cmd const[TIOCLINUX], arg ptr[in, const[TIOCL_BLANKSCREEN, int8]]) +# TIOCSSERIAL can do nasty things under root, like causing writes to random memory +# pretty much like /dev/mem, but this is also working as intended. +# For details see: +# https://groups.google.com/g/syzkaller-bugs/c/1rVENJf9P4U/m/QtGpapRxAgAJ +# https://syzkaller.appspot.com/bug?extid=f4f1e871965064ae689e +# TODO: TIOCSSERIAL does some other things that are not dangerous +# and would be nice to test, if/when we can neutralize based on sandbox value +# we could prohibit it only under sandbox=none. +ioctl$TIOCSSERIAL(fd fd, cmd const[TIOCSSERIAL], arg ptr[in, serial_struct]) (disabled) + ioctl$TIOCGSERIAL(fd fd_tty, cmd const[TIOCGSERIAL], arg ptr[out, serial_struct]) -ioctl$TIOCSSERIAL(fd fd_tty, cmd const[TIOCSSERIAL], arg ptr[in, serial_struct]) ioctl$TCGETS2(fd fd_tty, cmd const[TCGETS2], arg ptr[out, termios2]) ioctl$TCSETS2(fd fd_tty, cmd const[TCSETS2], arg ptr[in, termios2]) ioctl$TCSETSF2(fd fd_tty, cmd const[TCSETSF2], arg ptr[in, termios2]) |