lkml.org 
[lkml]   [2011]   [Sep]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2/2] mm: restrict access to /proc/meminfo
    On Tue, 27 Sep 2011 23:38:10 +0400
    Vasiliy Kulikov <segoon@openwall.com> wrote:

    > On Tue, Sep 27, 2011 at 21:56 +0400, Vasiliy Kulikov wrote:
    > > /proc/meminfo stores information related to memory pages usage, which
    > > may be used to monitor the number of objects in specific caches (and/or
    > > the changes of these numbers). This might reveal private information
    > > similar to /proc/slabinfo infoleaks. To remove the infoleak, just
    > > restrict meminfo to root. If it is used by unprivileged daemons,
    > > meminfo permissions can be altered the same way as slabinfo:
    > >
    > > groupadd meminfo
    > > usermod -a -G meminfo $MONITOR_USER
    > > chmod g+r /proc/meminfo
    > > chgrp meminfo /proc/meminfo
    >
    > Just to make it clear: since this patch breaks "free", I don't propose
    > it anymore.

    It will break top(1) too. It isn't my favoritest-ever patch :)


    \
     
     \ /
      Last update: 2011-09-28 23:49    [W:0.030 / U:0.164 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site