lkml.org 
[lkml]   [2014]   [Jul]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: ls -l /proc/1/exe -> Permission denied
From
Date
Richard Weinberger <richard.weinberger@gmail.com> wrote on 2014/07/20 
13:06:30:
>
> On Sun, Jul 20, 2014 at 12:55 PM, Andreas Schwab <schwab@linux-m68k.org>
wrote:
> > Joakim Tjernlund <joakim.tjernlund@transmode.se> writes:
> >
> >> Andreas Schwab <schwab@linux-m68k.org> wrote on 2014/07/19 22:21:59:
> >>>
> >>> Joakim Tjernlund <joakim.tjernlund@transmode.se> writes:
> >>>
> >>> > Trying to real /proc/<pid>/exe I noticed I could not read links
not
> >>> > belonging to my user such as:
> >>> > jocke > ls -l /proc/1/exe
> >>> > ls: cannot read symbolic link /proc/1/exe: Permission
> >> denied
> >>> >
> >>> > Is this expected?
> >>>
> >>> Yes. This information is considered private.
> >>
> >> I don't understand why though.
> >
> > It would allow bypassing access restrictions.
>
> Do you have an example?
> I'm asking because an attacker could make any symlink as he wants to.
> A ln -s /etc/shadow lala still does not give me access to shadow...

precisely, I just want to see what it is pointing too.
Also, the links privs are inconsistent with current behaviour:
lrwxrwxrwx 1 root root 0 Jul 15 19:03 exe

Jocke


\
 
 \ /
  Last update: 2014-07-20 14:01    [W:0.094 / U:0.128 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site