Messages in this thread | ![/](/images/icornerl.gif) | | Date | Thu, 04 Nov 2010 11:11:48 +0100 | From | Tejun Heo <> | Subject | Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking |
| |
On 11/04/2010 11:09 AM, Marcus Meissner wrote: > Making /proc/kallsyms readable only for root makes it harder > for attackers to write generic kernel exploits by removing > one source of knowledge where things are in the kernel. > > Signed-off-by: Marcus Meissner <meissner@suse.de>
I can't recall needing /proc/kallsyms when I wasn't root, so unless there's a compelling use case.
Acked-by: Tejun Heo <tj@kernel.org>
Thanks.
-- tejun
| ![\](/images/icornerr.gif) |