lkml.org 
[lkml]   [2010]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: [Security] [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
From
On Thu, Nov 4, 2010 at 6:11 PM, Tejun Heo <tj@kernel.org> wrote:
> On 11/04/2010 11:09 AM, Marcus Meissner wrote:
>> Making /proc/kallsyms readable only for root makes it harder
>> for attackers to write generic kernel exploits by removing
>> one source of knowledge where things are in the kernel.
>>
>> Signed-off-by: Marcus Meissner <meissner@suse.de>
>
> I can't recall needing /proc/kallsyms when I wasn't root, so unless
> there's a compelling use case.
>
> Acked-by: Tejun Heo <tj@kernel.org>

Looks good to me too.

Acked-by: Eugene Teo <eugeneteo@kernel.org>

Eugene


\
 
 \ /
  Last update: 2010-11-05 01:15    [from the cache]
©2003-2011 Jasper Spaans