lkml.org 
[lkml]   [2010]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
    On 11/04/2010 11:09 AM, Marcus Meissner wrote:
    > Making /proc/kallsyms readable only for root makes it harder
    > for attackers to write generic kernel exploits by removing
    > one source of knowledge where things are in the kernel.
    >
    > Signed-off-by: Marcus Meissner <meissner@suse.de>

    I can't recall needing /proc/kallsyms when I wasn't root, so unless
    there's a compelling use case.

    Acked-by: Tejun Heo <tj@kernel.org>

    Thanks.

    --
    tejun


    \
     
     \ /
      Last update: 2010-11-04 11:15    [from the cache]
    ©2003-2014 Jasper Spaans. hosted at Digital Ocean