Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo
From: Pekka Enberg <hidden>
Date: 2011-09-19 19:20:20
Also in:
lkml
Possibly related (same subject, not in this thread)
- 2011-09-22 · Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo · <hidden>
- 2011-09-21 · Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo · Vasiliy Kulikov <hidden>
- 2011-09-19 · Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo · <hidden>
- 2011-09-19 · Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo · Christoph Lameter <cl@gentwo.org>
- 2011-09-19 · Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo · <hidden>
On Mon, Sep 19, 2011 at 9:55 PM, Vasiliy Kulikov [off-list ref] wrote:
Oh, we also have perf... Given these are separate interfaces, I think slab oriented restriction makes more sense. So, now we have: /proc/slabinfo /sys/kernel/slab /proc/meminfo 'perf kmem' - not sure what specific files should be guarded
I don't think you can close down 'perf kmem' per se. You need to make
sure the attacker is not able to use perf tracing (of which 'perf kmem' is
a subset).
Pekka
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>