Messages in this thread | | | From | (Eric W. Biederman) | Date | Wed, 03 Aug 2016 12:35:39 -0500 | Subject | Re: [PATCH v2] locks: Filter /proc/locks output on proc pid ns |
| |
Nikolay Borisov <kernel@kyup.com> writes:
> On 08/03/2016 06:06 PM, J. Bruce Fields wrote: >> Digging around... Oh, I see, there's an optional 'lock:..' line in >> /proc/[pid]/fdinfo/[pid] file, is that what you're looking at? I'd >> forgotten. Yeah, maybe that would make more sense long term. > > Yep, that's the one but this requires the userspace to be updated to use > that interface. In the meantime we could do away with some maintenance > of the existing /proc/locks :)
I am tempted to say let's not change /proc/locks at all, but if locks really are in a pid namespace than I do think it makes sense to filter them in /proc just so there is not excessive visiblity outside of the pid namespace.
Excessive visibility is a problem on it's own.
Eric
| |