[lkml]   [2011]   [Nov]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [RFC v2 1/3] procfs: parse mount options
    Hi Andrew,

    On Mon, Nov 21, 2011 at 16:34 -0800, Andrew Morton wrote:
    > On Sat, 19 Nov 2011 15:01:26 +0400
    > Vasiliy Kulikov <> wrote:
    > > This patch adds support of procfs mount options.
    > > Actual mount options are coming in the next patches.
    > The patches look sane to me.

    Thank you for the review!

    > I assume that `mount -o remount' has been tested and works as expected?


    > I also assume that any file which was opened prior to the remount will
    > remain accessible to any process which has the fd. Is this acceptable
    > from a security/operational POV?

    No, currently this "check permissions on open()" is violated at least in
    getattr(). On each access the full permission checking is done.

    It is trivial to fix (by moving hide_pid to inode), but does it worth it?
    I see the scheme is totally constant during the system lifetime, i.e.
    procfs policy is defined during the boot in boot mount scripts and is not
    changed during the system lifetime at all. I see it as an ability to
    define different policies on per-container basis, but not a "change it
    from time to time" thing.

    If anybody see the case where it makes sense, I'll move hide_pid to

    FWIW, in grsecurity it is a CONFIG_ option and there is no such problem
    at all. :-)


    Vasiliy Kulikov - bringing security into open computing environments

     \ /
      Last update: 2011-11-22 11:11    [W:1.055 / U:88.632 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site