Home » Mailing list archives » linux-kernel » 2010 » November » 19

Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Linus Torvalds
Subject: Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking
Date: Friday, November 19, 2010 - 12:54 pm

On Fri, Nov 19, 2010 at 11:19 AM, Sarah Sharp
<sarah.a.sharp@linux.intel.com> wrote:

It's not worth a config option.

If it actually breaks user-space, I think we should just revert it.
It's kind of sad to default to the world-visible thing, but as I
mentioned in the commit, this is something where a sysadmin or distro
can trivially just fix it at boot-time too, with just a

   chmod og-r /proc/kallsyms

in your bootup scripts.

And if somebody has taken control of the machine _before_ the bootup
scripts get to run, you have bigger problems than a /proc/kallsyms
file.

So I guess I'll revert it.

Thanks for testing and bisecting.

                      Linus
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] kernel: make /proc/kallsyms mode 400 to reduce eas ..., Marcus Meissner, (Tue Nov 16, 3:46 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle McMartin, (Tue Nov 16, 10:07 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle Moffett, (Tue Nov 16, 10:40 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kyle Moffett, (Tue Nov 16, 10:41 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Tue Nov 16, 10:58 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Tue Nov 16, 11:19 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Thu Nov 18, 12:31 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Thu Nov 18, 12:48 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Sarah Sharp, (Fri Nov 19, 12:19 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Fri Nov 19, 12:54 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., david, (Fri Nov 19, 12:58 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Linus Torvalds, (Fri Nov 19, 1:04 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Fri Nov 19, 1:16 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., david, (Fri Nov 19, 1:55 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Kees Cook, (Fri Nov 19, 8:18 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Richard W.M. Jones, (Sat Nov 20, 4:05 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Avi Kivity, (Sat Nov 20, 4:32 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Pavel Machek, (Tue Nov 23, 10:24 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:38 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:48 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Fri Nov 26, 12:51 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Sarah Sharp, (Mon Nov 29, 9:33 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Mon Nov 29, 11:04 am)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:03 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:05 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Eric Paris, (Mon Nov 29, 12:21 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., H. Peter Anvin, (Mon Nov 29, 12:38 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Willy Tarreau, (Mon Nov 29, 2:49 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Alan Cox, (Mon Nov 29, 4:31 pm)
Re: [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ..., Ingo Molnar, (Tue Nov 30, 4:58 am)