procfs privacy: /proc/bus & /proc/net directory entries

PATCH In review Lorenzo Hernández García-Hierro 1 participant 1 message Apr 18, 2005 Proc filesystem

Share & tools

Lorenzo Hernández García-Hierro

author

2005-04-18 18:52 UTC #0 lore raw

PATCH 4/7 procfs privacy: /proc/bus & /proc/net directory entries

This patch changes the permissions of the /proc/net and /proc/bus directory entries so non-root users are restricted from accessing them.

It's also available at:
http://pearls.tuxedo-es.org/patches/security/proc-privacy-1_fs_proc_root.c.patch

Signature · 2 lines

Lorenzo Hernández García-Hierro <[email protected]> 
[1024D/6F2B2DEC] & [2048g/9AE91A22][http://tuxedo-es.org]

fs/proc/root.c renamed from fs/proc/root.c~proc-privacy-1 +2 -2

diff -puN fs/proc/root.c~proc-privacy-1 fs/proc/root.c
@@ -52,7 +52,7 @@ void __init proc_root_init(void)
 		return;
 	}
 	proc_misc_init();
-	proc_net = proc_mkdir("net", NULL);
+	proc_net = proc_mkdir_mode("net", S_IRUSR | S_IXUSR, NULL);
 	proc_net_stat = proc_mkdir("net/stat", NULL);
 
 #ifdef CONFIG_SYSVIPC

@@ -76,7 +76,7 @@ void __init proc_root_init(void)
 #ifdef CONFIG_PROC_DEVICETREE
 	proc_device_tree_init();
 #endif
-	proc_bus = proc_mkdir("bus", NULL);
+	proc_bus = proc_mkdir_mode("bus", S_IRUSR | S_IXUSR, NULL);
 }
 
 static struct dentry *proc_root_lookup(struct inode * dir, struct dentry * dentry, struct nameidata *nd)