diff options
| author | Djalal Harouni <[email protected]> | 2014-04-07 22:38:38 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2014-04-07 23:36:05 +0000 |
| commit | 32ed74a4b968a4faff7aaaff557035ce5d5e70ab (patch) | |
| tree | c03255e24b352eadc03c568a91ea205aac782879 /fs/proc/array.c | |
| parent | procfs: make /proc/*/{stack,syscall,personality} 0400 (diff) | |
| download | kernel-32ed74a4b968a4faff7aaaff557035ce5d5e70ab.tar.gz kernel-32ed74a4b968a4faff7aaaff557035ce5d5e70ab.zip | |
procfs: make /proc/*/pagemap 0400
The /proc/*/pagemap contain sensitive information and currently its mode
is 0444. Change this to 0400, so the VFS will prevent unprivileged
processes from getting file descriptors on arbitrary privileged
/proc/*/pagemap files.
This reduces the scope of address space leaking and bypasses by protecting
already running processes.
Signed-off-by: Djalal Harouni <[email protected]>
Acked-by: Kees Cook <[email protected]>
Acked-by: Andy Lutomirski <[email protected]>
Cc: Eric W. Biederman <[email protected]>
Cc: Al Viro <[email protected]>
Cc: Oleg Nesterov <[email protected]>
Cc: Ingo Molnar <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'fs/proc/array.c')
0 files changed, 0 insertions, 0 deletions