Messages in this thread | | | From | Juergen Pabel <> | Subject | Re: [PATCH] Masking kernel commandline parameters (2.6.7) | Date | Mon, 9 Aug 2004 20:12:47 -0400 |
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> In recent 2.6 kernels you can simply do a chmod on /proc/cmdline.
Interesting....still, you'd have to - - chmod /proc/cmdline - - chmod /var/log/boot.msg - - klogctl: reset the kernel message ring buffer - - ...anything else?
seem's like preventing such data from showing up in the first place would be much more appropriate. Also, what if that data isn't even for root's eye's (yes, I am security guy)?
jp -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBGBL/z6J7R+QJGuwRAhxQAJ9/NBCYiIrR+OiKwBaYtsgQzGS2zACgg7a4 OEESJ4MrRSHq/58HP/Tz/1E= =sCuy -----END PGP SIGNATURE----- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |