Messages in this thread | | | Date | Thu, 23 Sep 2021 18:16:16 -0700 | From | Kees Cook <> | Subject | Re: [PATCH] proc: Disable /proc/$pid/wchan |
| |
On Thu, Sep 23, 2021 at 05:22:30PM -0700, Vito Caputo wrote: > Instead of unwinding stacks maybe the kernel should be sticking an > entrypoint address in the current task struct for get_wchan() to > access, whenever userspace enters the kernel?
wchan is supposed to show where the kernel is at the instant the get_wchan() happens. (i.e. recording it at syscall entry would just always show syscall entry.)
-- Kees Cook
| |