Re: [PATCH] proc connector: reject unprivileged listener bumps

2013-02-27 Thread David Miller
From: Matt Helsley Date: Tue, 26 Feb 2013 09:24:41 -0800 > On Mon, Feb 25, 2013 at 11:32:25PM -0800, Kees Cook wrote: >> While PROC_CN_MCAST_LISTEN/IGNORE is entirely advisory, it was possible >> for an unprivileged user to turn off notifications for all listeners by >> sending PROC_CN_MCAST_IGNO

Re: [PATCH] proc connector: reject unprivileged listener bumps

2013-02-26 Thread Matt Helsley
On Mon, Feb 25, 2013 at 11:32:25PM -0800, Kees Cook wrote: > While PROC_CN_MCAST_LISTEN/IGNORE is entirely advisory, it was possible > for an unprivileged user to turn off notifications for all listeners by > sending PROC_CN_MCAST_IGNORE. Instead, require the same privileges as > required for a mul

Re: [PATCH] proc connector: reject unprivileged listener bumps

2013-02-26 Thread Evgeniy Polyakov
Hi On Mon, Feb 25, 2013 at 11:32:25PM -0800, Kees Cook (keesc...@chromium.org) wrote: > While PROC_CN_MCAST_LISTEN/IGNORE is entirely advisory, it was possible > for an unprivileged user to turn off notifications for all listeners by > sending PROC_CN_MCAST_IGNORE. Instead, require the same privi