Re: [PATCH 06/12] procfs: make /proc/*/stack 0400

2013-10-02 Thread Kees Cook
On Sat, Sep 28, 2013 at 7:35 AM, Djalal Harouni wrote: > On Thu, Sep 26, 2013 at 03:43:24PM -0500, Kees Cook wrote: >> On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni wrote: >> > The /proc/*/stack contains sensitive information and currently its mode >> > is 0444. Change this to 0400 so the VFS w

Re: [PATCH 06/12] procfs: make /proc/*/stack 0400

2013-10-02 Thread Kees Cook
On Sun, Sep 29, 2013 at 3:37 AM, Djalal Harouni wrote: > On Thu, Sep 26, 2013 at 03:43:24PM -0500, Kees Cook wrote: >> On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni wrote: >> > The /proc/*/stack contains sensitive information and currently its mode >> > is 0444. Change this to 0400 so the VFS w

Re: [PATCH 06/12] procfs: make /proc/*/stack 0400

2013-09-29 Thread Djalal Harouni
On Thu, Sep 26, 2013 at 03:43:24PM -0500, Kees Cook wrote: > On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni wrote: > > The /proc/*/stack contains sensitive information and currently its mode > > is 0444. Change this to 0400 so the VFS will be able to block > > unprivileged processes to get file d

Re: [PATCH 06/12] procfs: make /proc/*/stack 0400

2013-09-28 Thread Djalal Harouni
On Thu, Sep 26, 2013 at 03:43:24PM -0500, Kees Cook wrote: > On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni wrote: > > The /proc/*/stack contains sensitive information and currently its mode > > is 0444. Change this to 0400 so the VFS will be able to block > > unprivileged processes to get file d

Re: [PATCH 06/12] procfs: make /proc/*/stack 0400

2013-09-26 Thread Kees Cook
On Wed, Sep 25, 2013 at 3:14 PM, Djalal Harouni wrote: > The /proc/*/stack contains sensitive information and currently its mode > is 0444. Change this to 0400 so the VFS will be able to block > unprivileged processes to get file descriptors on arbitrary privileged > /proc/*/stack files. > > The /