[lkml]   [2010]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
    On 11/04/2010 11:09 AM, Marcus Meissner wrote:
    > Making /proc/kallsyms readable only for root makes it harder
    > for attackers to write generic kernel exploits by removing
    > one source of knowledge where things are in the kernel.
    > Signed-off-by: Marcus Meissner <>

    I can't recall needing /proc/kallsyms when I wasn't root, so unless
    there's a compelling use case.

    Acked-by: Tejun Heo <>



     \ /
      Last update: 2010-11-04 11:15    [from the cache]
    ©2003-2014 Jasper Spaans. hosted at Digital Ocean