Skip to content

Commit 23b1bf9

Browse files
cypharopsiff
authored andcommitted
memfd: drop warning for missing exec-related flags
mainline inclusion from mainline-v6.7-rc1 categroy: bugfix Commit 434ed33 ("memfd: improve userspace warnings for missing exec-related flags") attempted to make these warnings more useful (so they would work as an incentive to get users to switch to specifying these flags -- as intended by the original MFD_NOEXEC_SEAL patchset). Unfortunately, it turns out that even INFO-level logging is too extreme to enable by default and alternative solutions to the spam issue (such as doing more extreme rate-limiting per-task) are either too ugly or overkill for something as simple as emitting a log as a developer aid. Given that the flags are new and there is no harm to not specifying them (after all, we maintain backwards compatibility) we can just drop the warnings for now until some time in the future when most programs have migrated and distributions start using vm.memfd_noexec=1 (where failing to pass the flag would result in unexpected errors for programs that use executable memfds). Link: https://lkml.kernel.org/r/20230912-memfd-reduce-spam-v2-1-7d92a4964b6a@cyphar.com Fixes: 434ed33 ("memfd: improve userspace warnings for missing exec-related flags") Fixes: 2562d67 ("revert "memfd: improve userspace warnings for missing exec-related flags".") Signed-off-by: Aleksa Sarai <cyphar@cyphar.com> Reported-by: Damian Tometzki <dtometzki@fedoraproject.org> Reviewed-by: Christian Brauner <brauner@kernel.org> Cc: Daniel Verkamp <dverkamp@chromium.org> Cc: Jeff Xu <jeffxu@google.com> Cc: Kees Cook <keescook@chromium.org> Cc: Shuah Khan <shuah@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 1717449) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
1 parent 78d6121 commit 23b1bf9

1 file changed

Lines changed: 0 additions & 6 deletions

File tree

mm/memfd.c

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -315,12 +315,6 @@ SYSCALL_DEFINE2(memfd_create,
315315
if ((flags & MFD_EXEC) && (flags & MFD_NOEXEC_SEAL))
316316
return -EINVAL;
317317

318-
if (!(flags & (MFD_EXEC | MFD_NOEXEC_SEAL))) {
319-
pr_warn_once(
320-
"%s[%d]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set\n",
321-
current->comm, task_pid_nr(current));
322-
}
323-
324318
error = check_sysctl_memfd_noexec(&flags);
325319
if (error < 0)
326320
return error;

0 commit comments

Comments
 (0)