Home » Mailing list archives » linux-kernel » 2010 » November » 29

Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: H. Peter Anvin
Subject: Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
Date: Monday, November 29, 2010 - 12:38 pm

On 11/29/2010 11:21 AM, Eric Paris wrote:

Quite frankly, the Linux capability system is largely a mess, with big
bundled capacities that don't make much sense and are hideously
inconvenient with the capability system used in user space (groups).
For things like this that genuinely has a file node, *let's use it* and
allow permissions to be controlled by the file node!

	-hpa
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] kernel: make /proc/kallsyms mode 400 to reduce eas ..., Marcus Meissner, (Tue Nov 16, 3:46 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle McMartin, (Tue Nov 16, 10:07 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle Moffett, (Tue Nov 16, 10:40 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle Moffett, (Tue Nov 16, 10:41 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Tue Nov 16, 10:58 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Tue Nov 16, 11:19 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Thu Nov 18, 12:31 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Thu Nov 18, 12:48 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Sarah Sharp, (Fri Nov 19, 12:19 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Fri Nov 19, 12:54 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., david, (Fri Nov 19, 12:58 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Fri Nov 19, 1:04 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Fri Nov 19, 1:16 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., david, (Fri Nov 19, 1:55 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kees Cook, (Fri Nov 19, 8:18 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Richard W.M. Jones, (Sat Nov 20, 4:05 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Avi Kivity, (Sat Nov 20, 4:32 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Pavel Machek, (Tue Nov 23, 10:24 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:38 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:48 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:51 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Sarah Sharp, (Mon Nov 29, 9:33 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Mon Nov 29, 11:04 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:03 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:05 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Eric Paris, (Mon Nov 29, 12:21 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:38 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Mon Nov 29, 2:49 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Alan Cox, (Mon Nov 29, 4:31 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Tue Nov 30, 4:58 am)