linux/arch/um/kernel/skas/stub_exe_embed.S

/* SPDX-License-Identifier: GPL-2.0 */
#include <linux/init.h>
#include <linux/linkage.h>

__INITDATA

SYM_DATA_START(stub_exe_start)
	.incbin "arch/um/kernel/skas/stub_exe"
SYM_DATA_END_LABEL(stub_exe_start, SYM_L_GLOBAL, stub_exe_end)

__FINIT
um: use execveat to create userspace MMs Using clone will not undo features that have been enabled by libc. An example of this already happening is rseq, which could cause the kernel to read/write memory of the userspace process. In the future the standard library might also use mseal by default to protect itself, which would also thwart our attempts at unmapping everything. Solve all this by taking a step back and doing an execve into a tiny static binary that sets up the minimal environment required for the stub without using any standard library. That way we have a clean execution environment that is fully under the control of UML. Note that this changes things a bit as the FDs are not anymore shared with the kernel. Instead, we explicitly share the FDs for the physical memory and all existing iomem regions. Doing this is fine, as iomem regions cannot be added at runtime. Signed-off-by: Benjamin Berg <benjamin.berg@intel.com> Link: https://patch.msgid.link/20240919124511.282088-3-benjamin@sipsolutions.net [use pipe() instead of pipe2(), remove unneeded close() calls] Signed-off-by: Johannes Berg <johannes.berg@intel.com> 2024-09-19 14:45:03 +02:00			`/* SPDX-License-Identifier: GPL-2.0 */`
			`#include <linux/init.h>`
			`#include <linux/linkage.h>`

			`__INITDATA`

			`SYM_DATA_START(stub_exe_start)`
			`.incbin "arch/um/kernel/skas/stub_exe"`
			`SYM_DATA_END_LABEL(stub_exe_start, SYM_L_GLOBAL, stub_exe_end)`

			`__FINIT`