| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <201106161050.27716.arnd@arndb.de> Date: Thu, 16 Jun 2011 10:50:27 +0200 From: Arnd Bergmann <arnd@...db.de> To: Vasiliy Kulikov <segoon@...nwall.com> Cc: linux-kernel@...r.kernel.org, kernel-hardening@...ts.openwall.com, Andrew Morton <akpm@...ux-foundation.org>, "Greg Kroah-Hartman" <gregkh@...e.de>, "David S. Miller" <davem@...emloft.net> Subject: Re: [RFC 0/5 v4] procfs: introduce hidepid=, hidenet=, gid= mount options On Wednesday 15 June 2011, Vasiliy Kulikov wrote: > > This patch series adds support of procfs mount options and adds > mount options to restrict /proc/<pid>/ directories to owners and > /proc/<pid>/net/* to root. Additional group may be defined via > gid=, and this group will be privileged to study others /proc/<pid>/ > and networking information. > > Similar features are implemented for old kernels in -ow patches (for > Linux 2.2 and 2.4) and for Linux 2.6 in -grsecurity, but both of them > are implemented as configure options, not cofigurable in runtime, with > changes of gid of /proc/<pid>/, and without backward-compatible > /proc/<pid>/net/* handling. The patches all look good to me implementation-wise. I have no opinion on whether it's a good idea to include the feature or not. Arnd -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists