Messages in this thread | | | From | Linus Torvalds <> | Date | Tue, 5 Jun 2012 09:46:49 -0700 | Subject | Re: [PATCH] CMA: Do no enable it by default |
| |
On Tue, Jun 5, 2012 at 4:05 AM, Borislav Petkov <bp@amd64.org> wrote: > > Besides, in the config option it says "... which allow a process with > the correct privileges to directly read from or write to to another > process's address space.", which, if the reading process has somehow > gained privileges (as that never happens) is your security issue right > there.
What?
It's using the same privileges as ptrace. If you are allowed to ptrace somebody, there's no security issue.
Also, the reason it's "default y" is that the feature actually made it in earlier (with no config option at all). Now, I certainly agree that we could turn it off by default since it's not that common, but at the same time none of your actual commit comments make sense, so that would have to be fixed first.
Linus
| |