Messages in this thread | | | Subject | Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo | From | Valdis.Kletnieks@vt ... | Date | Mon, 19 Sep 2011 15:59:29 -0400 |
| |
On Mon, 19 Sep 2011 12:51:10 CDT, Christoph Lameter said:
> IMHO a restriction of access to slab statistics is reasonable in a > hardened environment. Make it dependent on CONFIG_SECURITY or some such > thing?
Probably need to invent a separate Kconfig variable - CONFIG_SECURITY is probably a way-too-big hammer for this nail. I can see lots of systems that want to enable that, but won't want to tighten access to slab. [unhandled content-type:application/pgp-signature] | |