Re: proc hidepid=2 and SGID programs

2013-09-19 Thread Vasiliy Kulikov
On Sun, Sep 15, 2013 at 01:58 -0700, Christian Kujau wrote: > Vasiliy Kulikov wrote: > >> But still, I wonder if this is > >> intended behaviour. > > > >Yes. > > > >If you think such side channel attacks are something you don't care, > >just turn hidepid off. That's why it is an option. > > > >I

Re: proc hidepid=2 and SGID programs

2013-09-15 Thread Christian Kujau
Christian Kujau wrote: >Vasiliy Kulikov >"pgrep sgid-program" returned nothing but "kill pics off stiff program" Gaah, that should read "kill pid-of-sgid-program", sorry. C. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.

Re: proc hidepid=2 and SGID programs

2013-09-15 Thread Christian Kujau
Vasiliy Kulikov wrote: >> But still, I wonder if this is >> intended behaviour. > >Yes. > >If you think such side channel attacks are something you don't care, >just turn hidepid off. That's why it is an option. > >If you want to turn it off for some users, use gid=XXX. Maybe my initial questio

Re: proc hidepid=2 and SGID programs

2013-09-14 Thread Vasiliy Kulikov
On Tue, Sep 10, 2013 at 01:30 -0700, Christian Kujau wrote: > On Sun, 8 Sep 2013 at 23:42, Eric W. Biederman wrote: > > I don't have a clue why anyone would want to hide processes, and make > > their own lives more difficult. > > Oh, there are plenty of usescases, I'm sure. And I for one am thankf

Re: proc hidepid=2 and SGID programs

2013-09-10 Thread Eric W. Biederman
Christian Kujau writes: > On Sun, 8 Sep 2013 at 23:42, Eric W. Biederman wrote: >> The check with hidepid is can you ptrace the process. I expect there >> is something with those sgid processes that keeps you from ptracing >> them. > > Indeed, I cannot strace the process. But still, I wonder if

Re: proc hidepid=2 and SGID programs

2013-09-10 Thread Christian Kujau
On Sun, 8 Sep 2013 at 23:42, Eric W. Biederman wrote: > I don't have a clue why anyone would want to hide processes, and make > their own lives more difficult. Oh, there are plenty of usescases, I'm sure. And I for one am thankful that this process hiding option made it into the kernel. Or, to an

Re: proc hidepid=2 and SGID programs

2013-09-08 Thread Eric W. Biederman
Christian Kujau writes: > Hi, > > I was wondering why I cannot see processes that were started from SGID > programs: I don't have a clue why anyone would want to hide processes, and make their own lives more difficult. The check with hidepid is can you ptrace the process. I expect there is so

proc hidepid=2 and SGID programs

2013-09-07 Thread Christian Kujau
Hi, I was wondering why I cannot see processes that were started from SGID programs: $ grep ^proc /proc/mounts proc /proc proc rw,nosuid,nodev,noexec,relatime,hidepid=2 0 0 $ ls -n `which ssh-agent` -rwxr-sr-x 1 0 103 132748 Feb 8 2013 /usr/bin/ssh-agent $ ev