lkml.org 
[lkml]   [2013]   [Sep]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: [PATCH 06/12] procfs: make /proc/*/stack 0400
    From
    On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni <tixxdz@opendz.org> wrote:
    > The /proc/*/stack contains sensitive information and currently its mode
    > is 0444. Change this to 0400 so the VFS will be able to block
    > unprivileged processes to get file descriptors on arbitrary privileged
    > /proc/*/stack files.
    >
    > The /proc/*/stack is a /procfs ONE file that shares the same ->open()
    > file operation with other ONE files. Doing a ptrace_may_access() check
    > during open() might break userspace from accessing other ONE files
    > like /proc/*/stat and /proc/*/statm.
    >
    > Therfore make it 0400 for now, and improve its check during ->read()
    > in the next following patch.
    >
    > Cc: Kees Cook <keescook@chromium.org>
    > Cc: Eric W. Biederman <ebiederm@xmission.com>
    > Signed-off-by: Djalal Harouni <tixxdz@opendz.org>

    While the rest of the series is being discussed, I think it would be
    nice to at least get this into the tree. Fixing this reduces which
    processes are exposed to ASLR leaks. The rest of the series closes the
    remaining holes.

    I would if it would be valuable adding a test for the identified leak
    conditions to some test suite? LTP perhaps?

    -Kees

    --
    Kees Cook
    Chrome OS Security


    \
     
     \ /
      Last update: 2013-09-26 23:01    [W:4.862 / U:0.192 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site