[lkml]   [2005]   [Mar]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH][RFC] Make /proc/<pid> chmod'able
    On Tue, 2005-03-15 at 15:31 +0100, Bodo Eggert wrote:
    > (snipped the CC list - hope that's ok)
    > On Mon, 14 Mar 2005, Albert Cahalan wrote:
    > > On Tue, 2005-03-15 at 00:08 +0100, Bodo Eggert wrote:
    > > > On Mon, 14 Mar 2005, Albert Cahalan wrote:

    > > This really isn't about security.
    > Information leakage is a security aspect.

    If you will go to such extremes, Linux is poorly suited.
    A user can detect activity on the computer by examining
    the performance of their own activity.

    > > Privacy may be undesirable.
    > May. That's why I suggested the min/max sysctl.
    > > With privacy comes anti-social behavior.
    > With anti-social behavior comes the admin and his LART.
    > BTW: If the users want to be anti-social, they'll just rename setiathome
    > to something like -bash or soffice.

    This does not matter: "Rene, your soffice program is eating
    too much CPU time. Find some other place to run it."

    > > Supposing that the
    > > users do get privacy, perhaps because the have paid for it:
    > Vservers,
    > > Xen, UML, VM, VMware, separate computers
    > >
    > > Going with separate computers is best.
    > If you like wasting space and energy. If the user's demands don't exceed
    > one percent of a historic PC, there is no point in buying more hardware.

    Sure there is:

    a. info leakage (way more than just /proc)
    b. admin control
    c. budget control
    d. downtime hits fewer users

    > > Don't forget to use
    > > network traffic control to keep users from being able to
    > > detect the network activity of other users.
    > Like that:?
    > $ netstat
    > Active Internet connections (w/o servers)
    > Proto Recv-Q Send-Q Local Address Foreign Address State
    > /proc/net/tcp: Permission denied

    Nope. If you really care about information leakage, you'll
    be concerned about the ability to detect network congestion.

    Example #1

    A spy sends packets from time to time. He measures the delay
    and packet loss to determine if the network is busy. When the
    network suddenly becomes busy, he can guess that you have
    started some operation that requires heavy network traffic.

    Example #2

    A spy sends packets from time to time. He measures the delay
    and packet loss to determine if the network is busy. Over time,
    he learns when workers are busy. From this he can determine an
    appropriate time to sneak into your building.

    Hey, if you're going to be paranoid about %CPU and %MEM, you
    have to be paranoid about %NET too. This requires traffic
    control unless you have separate networks. Assign a fixed
    portion of bandwidth to any user that you wish to hide info
    from. Be sure to consider latency as well.

    > > > > Users who want privacy can get their
    > > > > own computer. So, these need to work:
    > > > >
    > > > > ps [...]
    > > > > w
    > > > > top
    > > >
    > > > Works as intended. Only pstree breaks, if init isn't visible.
    > >
    > > They work like they do with a rootkit installed.
    > > Traditional behavior has been broken.
    > They are as broken as finger or ls are if the home directory is chmodded.

    Probably something should be done to deal with the problem of
    a chmodded home directory. It's not ls that matters though.
    It's du that matters. On a normal shared system, a user should
    be able to see where all the disk blocks and inodes are going.
    Filenames need not be visible. Then: "Rene, you're being kind
    of greedy about the disk space aren't you? You're using 666 GB."

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:11    [W:0.024 / U:3.188 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site