Re: Patch: Hide process info from other users/users not in my group

Hi Pavel, > This really needs to be runtime-configurable. Hm. When this setting is changed during runtime, all the pre-existing permissions would have to be changed as weill which might be done by iterating through a list of running processes. Unfortunately I don't know how to do that. This is my

Re: Patch: Hide process info from other users/users not in my group

Hi! > this patch sets (if the corresponding kconfig option is active) the access > modes of /proc/-dirs to 550 instead of 555 in order to provide some > privacy to users. Tools like lsof and ps to spy out on other users become > ineffective. > > Cheers, > -- > Daniel Reichelt > > # diff -Naur

Re: Patch: Hide process info from other users/users not in my group

Hi! this patch sets (if the corresponding kconfig option is active) the access modes of /proc/pid-dirs to 550 instead of 555 in order to provide some privacy to users. Tools like lsof and ps to spy out on other users become ineffective. Cheers, -- Daniel Reichelt # diff -Naur

Re: Patch: Hide process info from other users/users not in my group

Hi Pavel, This really needs to be runtime-configurable. Hm. When this setting is changed during runtime, all the pre-existing permissions would have to be changed as weill which might be done by iterating through a list of running processes. Unfortunately I don't know how to do that. This is my

Re: Patch: Hide process info from other users/users not in my group

Hi, sorry, I messed up the #ifdef directives (confused them with C++...). Here's the really working patch: --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 19:54:54.0 +0100 @@ -918,6 +918,36 @@ help

Re: Patch: Hide process info from other users/users not in my group

Hi, sorry, I messed up the #ifdef directives (confused them with C++...). Here's the really working patch: --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 19:54:54.0 +0100 @@ -918,6 +918,36 @@ help

Re: Patch: Hide process info from other users/users not in my group

> I like the idea, but I would prefer to have three checkboxes for this option: Nice addition, thanks for the input. --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 19:54:54.0 +0100 @@ -918,6 +918,36 @@ help

Re: Patch: Hide process info from other users/users not in my group

Hi Daniel, On Tue, Nov 20, 2007 at 11:34:20AM +0100, Daniel Reichelt wrote: > # diff -Naur linux-2.6.23.8/fs/Kconfig linux-2.6.23.8-dhr/fs/Kconfig > --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 > +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 11:33:18.0 +0100 >

Patch: Hide process info from other users/users not in my group

Hi list, this patch sets (if the corresponding kconfig option is active) the access modes of /proc/-dirs to 550 instead of 555 in order to provide some privacy to users. Tools like lsof and ps to spy out on other users become ineffective. Cheers, -- Daniel Reichelt # diff -Naur

Patch: Hide process info from other users/users not in my group

Hi list, this patch sets (if the corresponding kconfig option is active) the access modes of /proc/pid-dirs to 550 instead of 555 in order to provide some privacy to users. Tools like lsof and ps to spy out on other users become ineffective. Cheers, -- Daniel Reichelt # diff -Naur

Re: Patch: Hide process info from other users/users not in my group

Hi Daniel, On Tue, Nov 20, 2007 at 11:34:20AM +0100, Daniel Reichelt wrote: # diff -Naur linux-2.6.23.8/fs/Kconfig linux-2.6.23.8-dhr/fs/Kconfig --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 11:33:18.0 +0100 @@

Re: Patch: Hide process info from other users/users not in my group

I like the idea, but I would prefer to have three checkboxes for this option: Nice addition, thanks for the input. --- linux-2.6.23.8/fs/Kconfig 2007-11-16 19:14:27.0 +0100 +++ linux-2.6.23.8-dhr/fs/Kconfig 2007-11-20 19:54:54.0 +0100 @@ -918,6 +918,36 @@ help