Timeline for Linux: Can unprivileged users tamper with processes running under their own identity?
Current License: CC BY-SA 4.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 29, 2023 at 8:05 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 29, 2022 at 8:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 1, 2022 at 7:05 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 3, 2022 at 6:07 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 4, 2021 at 5:03 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 6, 2021 at 4:11 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 8, 2021 at 3:05 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 9, 2020 at 3:04 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 10, 2020 at 1:31 | comment | added | brynk |
@1-or-1 you could validate a signature with only a public key, ie. your valid python process can produce the pickle, and in the future, you can validate the integrity before you trust it .. but can you do this for all .so or .pyc? as you already know, nothing will stop an adjacent process in the current context from potentially accessing memory, the risk here being that another process intercepts the secret signing key, and generates a trustworthy sig for a malicious xyz file (look at hidepid=2 viz. linux-dev.org/2012/09/hide-process-information-for-other-users)
|
|
| Nov 9, 2020 at 3:04 | history | edited | 1' OR 1 -- | CC BY-SA 4.0 |
added 389 characters in body
|
| Nov 9, 2020 at 2:34 | comment | added | 1' OR 1 -- | I don't see how signing/authenticating could help as it would need to happen after the privilege drop and the keys would need to be accessible there. And to clarify, I don't assume the unprivileged Python process to be vulnerable or malicious itself. I just fear that another vulnerable process could be running as "nobody", which could in turn have the permissions to tamper with the memory of the unprivileged Python process after the privilege drop. | |
| Nov 9, 2020 at 2:17 | history | edited | 1' OR 1 -- | CC BY-SA 4.0 |
deleted 2 characters in body
|
| Nov 9, 2020 at 2:01 | answer | added | Alexis Wilke | timeline score: 1 | |
| Nov 9, 2020 at 1:57 | comment | added | brynk |
you can't completely isolate a python process launched by yourself, within the same context as a malicious one, on the 'average' linux kernel, any more than you can punch yourself in the face and win... (eg. try strace next time you start python and see how much gets pulled in...) Q: do you have the luxury of signing or encrypting (aead) the pickled data?
|
|
| Nov 9, 2020 at 1:42 | review | First posts | |||
| Nov 9, 2020 at 8:58 | |||||
| Nov 9, 2020 at 1:36 | history | asked | 1' OR 1 -- | CC BY-SA 4.0 |