lkml.org 
[lkml]   [2010]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [Security] [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
    From
    On Thu, Nov 4, 2010 at 6:11 PM, Tejun Heo <tj@kernel.org> wrote:
    > On 11/04/2010 11:09 AM, Marcus Meissner wrote:
    >> Making /proc/kallsyms readable only for root makes it harder
    >> for attackers to write generic kernel exploits by removing
    >> one source of knowledge where things are in the kernel.
    >>
    >> Signed-off-by: Marcus Meissner <meissner@suse.de>
    >
    > I can't recall needing /proc/kallsyms when I wasn't root, so unless
    > there's a compelling use case.
    >
    > Acked-by: Tejun Heo <tj@kernel.org>

    Looks good to me too.

    Acked-by: Eugene Teo <eugeneteo@kernel.org>

    Eugene


    \
     
     \ /
      Last update: 2010-11-05 01:15    [W:0.020 / U:297.916 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site