linux-kernel - [PATCH 60/91] Make TASKSTATS require root access

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20120205220952.019376250@pcw.home.local>
Date:	Sun, 05 Feb 2012 23:10:49 +0100
From:	Willy Tarreau <w@....eu>
To:	linux-kernel@...r.kernel.org, stable@...r.kernel.org
Cc:	Johannes Berg <johannes.berg@...el.com>,
	Balbir Singh <bsingharora@...il.com>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Moritz MÃ¼hlenhoff <jmm@...til.org>,
	Greg KH <gregkh@...uxfoundation.org>
Subject: [PATCH 60/91] Make TASKSTATS require root access

2.6.27-longterm review patch.  If anyone has any objections, please let us know.

------------------

commit 1a51410abe7d0ee4b1d112780f46df87d3621043 upstream.

Ok, this isn't optimal, since it means that 'iotop' needs admin
capabilities, and we may have to work on this some more.  But at the
same time it is very much not acceptable to let anybody just read
anybody elses IO statistics quite at this level.

Use of the GENL_ADMIN_PERM suggested by Johannes Berg as an alternative
to checking the capabilities by hand.

Reported-by: Vasiliy Kulikov <segoon@...nwall.com>
Cc: Johannes Berg <johannes.berg@...el.com>
Acked-by: Balbir Singh <bsingharora@...il.com>
Signed-off-by: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Moritz Mühlenhoff <jmm@...til.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@...e.de>
---
 kernel/taskstats.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

Index: longterm-2.6.27/kernel/taskstats.c
===================================================================
--- longterm-2.6.27.orig/kernel/taskstats.c	2012-02-05 22:34:33.153915196 +0100
+++ longterm-2.6.27/kernel/taskstats.c	2012-02-05 22:34:43.419915481 +0100
@@ -574,6 +574,7 @@
 	.cmd		= TASKSTATS_CMD_GET,
 	.doit		= taskstats_user_cmd,
 	.policy		= taskstats_cmd_get_policy,
+	.flags		= GENL_ADMIN_PERM,
 };
 
 static struct genl_ops cgroupstats_ops = {


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/