lkml.org 
[lkml]   [2011]   [Sep]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo
    From
    On Mon, Sep 19, 2011 at 9:55 PM, Vasiliy Kulikov <segoon@openwall.com> wrote:
    > Oh, we also have perf...  Given these are separate interfaces, I think
    > slab oriented restriction makes more sense.
    >
    > So, now we have:
    >
    > /proc/slabinfo
    > /sys/kernel/slab
    > /proc/meminfo
    > 'perf kmem' - not sure what specific files should be guarded

    I don't think you can close down 'perf kmem' per se. You need to make
    sure the attacker is not able to use perf tracing (of which 'perf kmem' is
    a subset).

    Pekka
    --
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2011-09-19 21:23    [W:0.020 / U:1.036 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site