lkml.org 
[lkml]   [2005]   [Apr]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Subject[PATCH 0/7] procfs privacy
From
Date
As extracted from grsecurity's config. documentation: "non-root
users will only be able to view their own processes, and restricts
them from viewing network-related information, and viewing kernel
symbol and module information."

This is a procfs "privacy" split-up patch based in grsecurity procfs
restrictions
with some changes, more concretely, the restricted sections and entries
are:

- /proc/bus
/pci
- /proc/net
- /proc/config.gz
- /proc/kallsyms
- /proc/ioports
- /proc/iomem
- /proc/devices
- /proc/cmdline
- /proc/version
- /proc/uptime
- /proc/cpuinfo
- /proc/partitions
- /proc/stat
- /proc/interrupts
- /proc/slabinfo
- /proc/diskstats
- /proc/modules
- /proc/schedstat

Signed-off-by: Lorenzo Hernandez Garcia-Hierro <lorenzo@gnu.org>
---

linux-2.6.11-lorenzo/drivers/pci/proc.c | 4 ++--
linux-2.6.11-lorenzo/fs/proc/base.c | 10 +++++++++-
linux-2.6.11-lorenzo/fs/proc/proc_misc.c | 25
+++++++++++++------------
linux-2.6.11-lorenzo/fs/proc/root.c | 4 ++--
linux-2.6.11-lorenzo/kernel/configs.c | 2 +-
linux-2.6.11-lorenzo/kernel/kallsyms.c | 2 +-
linux-2.6.11-lorenzo/kernel/resource.c | 4 ++--
7 files changed, 30 insertions(+), 21 deletions(-)

--
Lorenzo Hernández García-Hierro <lorenzo@gnu.org>
[1024D/6F2B2DEC] & [2048g/9AE91A22][http://tuxedo-es.org]
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2005-04-18 20:55    [W:0.076 / U:2.600 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site