lkml.org 
[lkml]   [2005]   [Mar]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH][RFC] Make /proc/<pid> chmod'able
    From
    Date
    > OK, folks, another try to enhance privacy by hiding
    > process details from other users. Why not simply use
    > chmod to set the permissions of /proc/<pid> directories?
    > This patch implements it.
    >
    > Children processes inherit their parents' proc
    > permissions on fork. You can only set (and remove)
    > read and execute permissions, the bits for write,
    > suid etc. are not changable. A user would add
    >
    > chmod 500 /proc/$$
    >
    > or something similar to his .profile to cloak his processes.
    >
    > What do you think about that one?

    This is a bad idea. Users should not be allowed to
    make this decision. This is rightly a decision for
    the admin to make.

    Note: I'm the procps (ps, top, w, etc.) maintainer.

    Probably I'd have to make /bin/ps run setuid root
    to deal with this. (minor changes needed) The same
    goes for /usr/bin/top, which I know is currently
    unsafe and difficult to fix.

    Let's not go there, OK?

    If you restricted this new ability to root, then I'd
    have much less of an objection. (not that I'd like it)



    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:11    [W:0.019 / U:30.820 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site