lkml.org 
[lkml]   [2013]   [Aug]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [PATCH 1/2] procfs: restore 0400 permissions on /proc/*/{syscall,stack,personality}

    I have take a moment and read this thread, and have been completely
    unenlightend. People are upset but it is totally unclear why.

    There is no explanation why it is ok to ignore the suid-exec case, as
    the posted patches do. Which ultimately means the patches provide
    little to no security benefit, and that the posted patches as written
    are broken.

    There is no clear explanation of what people are worried about.
    References to other threads and other commits do not help.

    Can someome please state what they are worried about in simple language
    step by step?

    I see absolutely nothing to overturn Al's analysis that these files
    simply don't need protection.



    The closest I saw in the thread was people were worried about ASLR being
    defeated. All I see are kernel addresses and we don't have much if any
    runtime or even load time randomization of where code is located in the
    kernel address map on x86_64. So I don't understand the concern.

    Certainly all of the clever applications and use of suid apps appear to
    be jumping around crazy hoops and to achieve what I can achieve with a
    simple cat of a file.

    Eric


    \
     
     \ /
      Last update: 2013-08-29 02:41    [W:3.244 / U:0.180 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site