Messages in this thread | | | Date | Thu, 6 Apr 2006 16:33:23 -0700 | From | "Tony Luck" <> | Subject | Re: [PATCH] Add a /proc/self/exedir link |
| |
> > I have concerns about security policy ... > > I'm not sure I understand. Only if you run that program, and if you > don't have access to the intermediate directory, how do you run it?
It leaks information about the parts of the pathname below the directory that you otherwise would not be able to see. E.g. if I have $HOME/top-secret-projects/secret-code-name1/binary where the top-secret-projects directory isn't readable by you, then you may find out secret-code-name1 by reading the /proc/{pid}/exedir symlink.
-Tony - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |