Messages in this thread | | | Date | Fri, 5 Nov 2010 08:11:49 +0800 | Subject | Re: [Security] [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking | From | Eugene Teo <> |
| |
On Thu, Nov 4, 2010 at 6:11 PM, Tejun Heo <tj@kernel.org> wrote: > On 11/04/2010 11:09 AM, Marcus Meissner wrote: >> Making /proc/kallsyms readable only for root makes it harder >> for attackers to write generic kernel exploits by removing >> one source of knowledge where things are in the kernel. >> >> Signed-off-by: Marcus Meissner <meissner@suse.de> > > I can't recall needing /proc/kallsyms when I wasn't root, so unless > there's a compelling use case. > > Acked-by: Tejun Heo <tj@kernel.org>
Looks good to me too.
Acked-by: Eugene Teo <eugeneteo@kernel.org>
Eugene
| |