.png){kind=icon}
返回
Automatic Permission Check Analysis for Linux Kernel
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2022.3165368.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Permission checks play an essential role in operating system security by providing access control to privileged functionalities. However, it is challenging for kernel developers to scalably verify the soundness of existing checks due to the large codebase and complexity of the kernel. In fact, Linux kernel contains millions of lines of code with hundreds of permission checks, and even worse, its complexity is fast-growing. This paper presents PeX, a static Permission check error detector for LinuX, which takes as input a kernel source code and reports any missing, inconsistent, and redundant permission checks. PeX uses KIRIN (Kernel InteRface based Indirect call aNalysis), a novel, precise, and scalable indirect call analysis technique. Over the interprocedural control flow graph built by KIRIN, PeX automatically identifies permission checks and infers the mappings between permission checks and privileged functions. For each privileged function, PeX examines all possible paths to the function to check if necessary permission checks are correctly enforced. We evaluated PeX on the latest stable Linux kernel v4.18.5 for three types of permission checks: Discretionary Access Controls (DAC), Capabilities, and Linux Security Modules (LSM). PeX reported 45 new permission check errors, 17 of which have been confirmed by the kernel developers.
Keyword:
Kernel
Linux
Permission
Codes
Access control
Computer science
Computer bugs
Linux kernel
static analysis
permission check
bug detection
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
分享收藏分享收藏Purification, cloning and expression of spinach leaf sucrose-phosphate synthase in Escherichia coli.png)
Planta
PlantaIF0
PREAI
分享收藏Determination of dissimilatory sulfate reduction rates in marine sediment via radioactive 35S tracer
OAAI
OAAI分享收藏
查看更多内容