[lkml]   [2011]   [Sep]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo
    On Mon, Sep 19, 2011 at 9:55 PM, Vasiliy Kulikov <> wrote:
    > Oh, we also have perf...  Given these are separate interfaces, I think
    > slab oriented restriction makes more sense.
    > So, now we have:
    > /proc/slabinfo
    > /sys/kernel/slab
    > /proc/meminfo
    > 'perf kmem' - not sure what specific files should be guarded

    I don't think you can close down 'perf kmem' per se. You need to make
    sure the attacker is not able to use perf tracing (of which 'perf kmem' is
    a subset).

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2011-09-19 21:23    [W:0.584 / U:32.456 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site