Messages in this thread | | | Subject | Re: proc hidepid=2 and SGID programs | From | Christian Kujau <> | Date | Sun, 15 Sep 2013 01:58:42 -0700 |
| |
Vasiliy Kulikov <segoon@openwall.com> wrote: >> But still, I wonder if this is >> intended behaviour. > >Yes. > >If you think such side channel attacks are something you don't care, >just turn hidepid off. That's why it is an option. > >If you want to turn it off for some users, use gid=XXX.
Maybe my initial question got lost in the noise: I merely wondered why "pgrep sgid-program" returned nothing but "kill pics off stiff program" was possible. Sure, if that's intended behavior, so be it. I just don't understand the (technical) reasoning behind this.
Thanks, Christian.
| |