[lkml]   [2012]   [Jan]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH v3] sysctl: control functionality of /proc/pid/mem
    On Mon, 2012-01-23 at 13:21 -0800, Kees Cook wrote:
    > Add the "proc_pid_mem" sysctl to control whether or not /proc/pid/mem is
    > allowed to work: 0: disabled, 1: read only, 2: read/write (default).

    Both your git commit and the Documentation/ entry are totally missing a
    rationale for this. Why would an admin want to set this on or off?
    What replaces it, if anything? What are the tradeoffs with its
    replacement? What userspace programs might break when this is toggled?

     \ /
      Last update: 2012-01-24 18:37    [W:0.028 / U:18.248 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site