lkml.org 
[lkml]   [2011]   [Sep]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo
    Hi Vasiliy,

    On Sat, Sep 10, 2011 at 08:41:34PM +0400, Vasiliy Kulikov wrote:
    > Historically /proc/slabinfo has 0444 permissions and is accessible to
    > the world. slabinfo contains rather private information related both to
    > the kernel and userspace tasks. Depending on the situation, it might
    > reveal either private information per se or information useful to make
    > another targeted attack. Some examples of what can be learned by
    > reading/watching for /proc/slabinfo entries:
    > ...
    > World readable slabinfo simplifies kernel developers' job of debugging
    > kernel bugs (e.g. memleaks), but I believe it does more harm than
    > benefits. For most users 0444 slabinfo is an unreasonable attack vector.
    >
    > Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>

    Haven't had any mass complaints about the 0400 in Ubuntu (sorry Dave!), so
    I'm obviously for it.

    Reviewed-by: Kees Cook <kees@ubuntu.com>

    -Kees

    --
    Kees Cook
    Ubuntu Security Team


    \
     
     \ /
      Last update: 2011-09-14 21:37    [W:0.025 / U:60.448 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site