procfs privacy
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest7 patches 14 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/7 | procfs privacy: /proc/bus/pcidrivers/ | +2 | 1 reply | |
| 2/7 | procfs privacy: tasks/processes lookupfs/ | +9 | 3 replies | |
| 3/7 | procfs privacy: misc. entriesfs/ | +13 | 4 replies | |
| 4/7 | procfs privacy: /proc/bus & /proc/net directory entriesfs/ | +2 | 0 replies | |
| 5/7 | procfs privacy: /proc/config.gzkernel/ | +1 | 1 reply | |
| 6/7 | procfs privacy: /proc/kallsymskernel/ | +1 | 0 replies | |
| 7/7 | procfs privacy: /proc/iomem & /proc/ioportskernel/ | +2 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/7] procfs privacy
As extracted from grsecurity's config. documentation: "non-root users will only be able to view their own processes, and restricts them from viewing network-related information, and viewing kernel symbol and module information."
This is a procfs "privacy" split-up patch based in grsecurity procfs restrictions
with some changes, more concretely, the restricted sections and entries are:
- /proc/bus
/pci
- /proc/net
- /proc/config.gz
- /proc/kallsyms
- /proc/ioports
- /proc/iomem
- /proc/devices
- /proc/cmdline
- /proc/version
- /proc/uptime
- /proc/cpuinfo
- /proc/partitions
- /proc/stat
- /proc/interrupts
- /proc/slabinfo
- /proc/diskstats
- /proc/modules
- /proc/schedstat
Signed-off-by Lorenzo Hernandez Garcia-Hierro <[email protected]>
---
linux-2.6.11-lorenzo/drivers/pci/proc.c | 4 ++-- linux-2.6.11-lorenzo/fs/proc/base.c | 10 +++++++++- linux-2.6.11-lorenzo/fs/proc/proc_misc.c | 25 +++++++++++++------------ linux-2.6.11-lorenzo/fs/proc/root.c | 4 ++-- linux-2.6.11-lorenzo/kernel/configs.c | 2 +- linux-2.6.11-lorenzo/kernel/kallsyms.c | 2 +- linux-2.6.11-lorenzo/kernel/resource.c | 4 ++-- 7 files changed, 30 insertions(+), 21 deletions(-)
Signature · 2 lines
Lorenzo Hernández García-Hierro <[email protected]> [1024D/6F2B2DEC] & [2048g/9AE91A22][http://tuxedo-es.org]