Messages in this thread | | | Date | Fri, 30 Mar 2012 23:56:52 +0400 | From | Cyrill Gorcunov <> | Subject | Re: [rfc] fcntl: Add F_GETOWNER_UIDS option |
| |
On Fri, Mar 30, 2012 at 12:46:51PM -0700, Kees Cook wrote: > >> > >> I meant the dumper. Yes, at moment f_get/setown requires no privileges > >> but I'm not sure if uid/euid is same or less sensible information > >> than pid, that's why I though CAP_FOWNER might be worth to add, no? > > > > Hmm, I would say no, but that might be a good question for kees. > > > > IMO it's not sensitive information and so no sense requiring privilege > > (and encouraging handing out of extra privilage to get at the info) > > Nothing jumps out at me about just seeing uid/euid. Everything can be > construed as an information leak, but this don't seem like something > that needs special protection.
OK, thanks Kees.
Cyrill
| |