linux-kernel - Re: [PATCH] fs/proc: Add process text segment md5-summing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <50A2F7C9.2030006@xdin.com>
Date:	Wed, 14 Nov 2012 01:45:46 +0000
From:	Arvid Brodin <Arvid.Brodin@...n.com>
To:	"Eric W. Biederman" <ebiederm@...ssion.com>
CC:	Andrew Morton <akpm@...ux-foundation.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	Al Viro <viro@...iv.linux.org.uk>,
	"Cyrill Gorcunov" <gorcunov@...nvz.org>,
	David Rientjes <rientjes@...gle.com>
Subject: Re: [PATCH] fs/proc: Add process text segment md5-summing

On 2012-11-13 03:16, Eric W. Biederman wrote:
> To add another nail in the coffin.
> 
> You can do this with ptrace or with /proc/<pid>/mem without a kernel
> patch.
> 
> To make this safe would need a ptrace_may_acces(PTRACE_MODE_READ)
> permission check.  At which point not doing this with ptrace just adds
> up to extra kernel maintenance for no real point.

If my client still wants to run text segment checks, even after the
criticism of the idea behind the patch, the above should prove very
handy. Thanks!


-- 
Arvid Brodin | Consultant (Linux)
XDIN AB | Knarrarnäsgatan 7 | SE-164 40 Kista | Sweden | xdin.com