Messages in this thread | | | Date | Thu, 3 Jan 2008 23:57:36 +0000 | From | Al Viro <> | Subject | Re: [PATCH] proc: advertise new restrictions on /proc/*/maps & /proc/*/smaps |
| |
On Fri, Jan 04, 2008 at 12:51:50AM +0100, Guillaume Chazarain wrote: > Now that strangers are kept out of /proc/<pid>/maps, let's welcome them > with -EPERM instead of a blank file.
NAK
The whole point is that we have to reject it at read() time, not open() time. Checks in open() are a) useless (since conditions can change later) and b) actually broken, since CAP_SYS_PTRACE != CAP_DAC_OVERRIDE
| |