Messages in this thread | | | Date | Thu, 29 Mar 2012 15:19:08 -0700 | From | Tim Bird <> | Subject | Re: [RFC] Android Logger vs. Shared Memory FIGHT! |
| |
On 03/29/2012 11:50 AM, Alan Cox wrote: > The question is whether you are trying to record data for analysis in a > hostile environment or you are trying to do useful debugging. If your > apps are non hostile then PR_SET_NAME is actually useful in logging to > split apart different executions of the same daemon. > > The Android logger has no security model of any real kind so it's clearly > about the debug side. In that case the PID lets you correlate with other > logs, the comm data might be useful.
The current model has limited security, other than being in the kernel and thus harder to corrupt (but still subject to DOS attacks via overruning the log).
I think the envisioned security issues are more about preventing access to application logs which might reveal sensitive information (due to un-careful logging), than about analysing a hostile environment. But if it can be made harder for a bad program to cover it's tracks, that would be nice. -- Tim
============================= Tim Bird Architecture Group Chair, CE Workgroup of the Linux Foundation Senior Staff Engineer, Sony Network Entertainment =============================
| |