proc: hide kernel addresses via %pK in /proc/<pid>/stack
PATCH 1/1 proc: hide kernel addresses via %pK in /proc/<pid>/stack
This file is readable for the task owner.
Hide kernel addresses from unprivileged users,
leave them function names and offsets.
Signed-off-by Konstantin Khlebnikov <[email protected]>
--- fs/proc/base.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
fs/proc/base.c +1 -1
@@ -340,7 +340,7 @@ static int proc_pid_stack(struct seq_file *m, struct pid_namespace *ns,save_stack_trace_tsk (task, &trace);for (i =0 ; i < trace.nr_entries; i++) { -seq_printf (m,"[<%p>] %pS\n" , +seq_printf (m,"[<%pK>] %pS\n" , (void *)entries[i], (void *)entries[i]); }kfree (entries);
Quoted 5 lines · Konstantin Khlebnikov
This file is readable for the task owner.
Hide kernel addresses from unprivileged users,
leave them function names and offsets.Signed-off-by Konstantin Khlebnikov <[email protected]>
Yes, please. :)
Acked-by Kees Cook <[email protected]>
Signature · 2 lines
Kees Cook Ubuntu Security Team