lkml.org 
[lkml]   [2023]   [Jan]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v3 1/2] exec: add PR_HIDE_SELF_EXE prctl


    On Fri, Jan 20, 2023, at 5:25 AM, Giuseppe Scrivano wrote:
    > This patch adds a new prctl called PR_HIDE_SELF_EXE which allows
    > processes to hide their own /proc/*/exe file. When this prctl is
    > used, every access to /proc/*/exe for the calling process will
    > fail with ENOENT.

    How about a mount option for procfs like `mount -t procfs procfs /proc -o rw,nosuid,nodev,magiclink-no-xdev`

    Where `magiclink-no-xdev` would cause all magic links to fail to cross a pid namespace or so?

    \
     
     \ /
      Last update: 2023-03-26 23:52    [W:8.473 / U:0.016 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site