[lkml]   [2012]   [Mar]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 0/9] proc: protect /proc/<pid>/* files across execve
    Djalal Harouni <> writes:

    > Procfs files and other important objects may contain sensitive information
    > which must not be seen, inherited or processed across execve.

    So I am dense. /proc/<pid>/mem was special in that it uses a different
    set of checks than other files, and to do those access checks
    /proc/<pid>/mem needed to look at exec_id.

    For all of the access checks that are not written in that silly way.
    What is wrong with ptrace_may_access run at every read/write of a file?

    We redo all of the permission checks every time so that should avoid

    I really think you are trying to solve something that is not broken.
    Certainly I could not see your argument for why anything but
    /proc/<pid>/mem needs attention.


     \ /
      Last update: 2012-03-12 20:13    [W:0.051 / U:317.800 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site