| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Sun, 16 Nov 2008 22:31:00 +0100 From: "Rafael J. Wysocki" <rjw@...k.pl> To: Peter Palfrader <peter@...frader.org> Cc: linux-kernel@...r.kernel.org Subject: Re: broken ownership of /proc/sys/ files on 2.6.27 On Sunday, 16 of November 2008, Peter Palfrader wrote: > Hi, > > on several (probably all) of my systems running a 2.6.27 kernel on at > least i386, amd64, ia64, sparc proc/sys does have files not owned by > root: Well, my system running 2.6.27.6 doesn't have this problem. > weasel@...la:~$ find /proc/sys ! -uid 0 -ls > 2273612 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:55 /proc/sys/kernel/sched_rt_runtime_us > 2273615 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:55 /proc/sys/kernel/core_uses_pid > 2273616 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:55 /proc/sys/kernel/core_pattern > 2273621 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/hotplug > 2273622 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/acct > 2273623 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/sysrq > 2273624 0 -rw------- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/cad_pid > 2273625 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/threads-max > 2217102 0 -r--r--r-- 1 joy Debian 0 Nov 16 19:57 /proc/sys/kernel/random/entropy_avail > 2273626 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/overflowuid > 2273627 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/overflowgid > 2273628 0 -rw-r--r-- 1 nobody munin 0 Nov 16 20:55 /proc/sys/kernel/panic_on_oops > 2273635 0 -r--r--r-- 1 nobody nogroup 0 Nov 16 20:55 /proc/sys/kernel/bootloader_type > 2273636 0 -rw-r--r-- 1 weasel Debian 0 Nov 16 20:55 /proc/sys/kernel/kstack_depth_to_print > 2273638 0 -rw-r--r-- 1 weasel Debian 0 Nov 16 20:55 /proc/sys/kernel/randomize_va_space > 2273598 0 dr-xr-xr-x 0 weasel Debian 0 Nov 16 20:55 /proc/sys/vm > 2209118 0 -r--r--r-- 1 joy Debian 0 Nov 16 19:50 /proc/sys/fs/file-nr > weasel@...la:~$ uname -a > Linux villa 2.6.27.6-dsa-dl380-oldxeon #2 SMP Fri Nov 14 01:40:49 CET 2008 i686 GNU/Linux > > > weasel@...el:~$ find /proc/sys ! -uid 0 -ls > 3917380 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_latency_ns > 3917381 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_wakeup_granularity_ns > 3917382 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_shares_ratelimit > 3917383 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_child_runs_first > 3917384 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_features > 3917387 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_rt_period_us > 3917388 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_rt_runtime_us > 3917389 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:57 /proc/sys/kernel/sched_compat_yield > 3847910 0 -rw-r--r-- 1 joeyh Debian 0 Nov 16 20:11 /proc/sys/kernel/pid_max > 3917373 0 dr-xr-xr-x 0 weasel Debian 0 Nov 16 20:57 /proc/sys/fs > 3917376 0 dr-xr-xr-x 0 nagios nagios 0 Nov 16 20:57 /proc/sys/net > weasel@...el:~$ uname -a > Linux ravel 2.6.27.6-dsa-amd64-opteron #2 SMP Fri Nov 14 01:32:43 CET 2008 x86_64 GNU/Linux > > weasel@...allero:~$ find /proc/sys ! -uid 0 -ls > 6950 0 -rw-r--r-- 1 weasel Debian 0 Nov 16 20:48 /proc/sys/kernel/sched_min_granularity_ns > 6951 0 -rw-r--r-- 1 weasel Debian 0 Nov 16 20:48 /proc/sys/kernel/sched_latency_ns > 6955 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/sched_features > 6959 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/sched_rt_runtime_us > 2173 0 -r--r--r-- 1 nobody munin 0 Nov 16 20:35 /proc/sys/kernel/random/entropy_avail > 6971 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/overflowuid > 6972 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/overflowgid > 6973 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/panic_on_oops > 6974 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/printk_ratelimit > 6975 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/printk_ratelimit_burst > 6978 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/softlockup_panic > 6979 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/softlockup_thresh > 6980 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:48 /proc/sys/kernel/hung_task_check_count > 1618 0 -r--r--r-- 1 nobody munin 0 Nov 16 20:35 /proc/sys/fs/file-nr > weasel@...allero:~$ uname -a > Linux caballero 2.6.27.2-dsa-mckinley #1 SMP Sun Oct 19 12:14:46 UTC 2008 ia64 GNU/Linux > > weasel@...ntini:~$ find /proc/sys ! -uid 0 -ls > 41263 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/panic > 41264 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/core_uses_pid > 41267 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/real-root-dev > 41271 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/scons-poweroff > 41272 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/ctrl-alt-del > 41273 0 -r--r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/sg-big-buff > 41280 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/printk > 41291 0 -r--r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/version > 41292 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/hostname > 41293 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/domainname > 41294 0 -rw-r--r-- 1 nagios nagios 0 Nov 16 20:58 /proc/sys/kernel/shmmax > 5299 0 -r--r--r-- 1 nobody munin 0 Nov 16 19:22 /proc/sys/fs/file-nr > 41259 0 dr-xr-xr-x 0 weasel Debian 0 Nov 16 20:58 /proc/sys/debug > weasel@...ntini:~$ uname -a > Linux spontini 2.6.27.2-dsa-usii #2 SMP Sun Oct 19 16:34:26 CEST 2008 sparc64 GNU/Linux > > > That's probably not how it should be, right? No, it's not. Thanks, Rafael -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists