Re: [uml-devel] [RFC][PATCH] um: Remove proc command from mconsole

2017-05-21 Thread Al Viro
On Sun, May 21, 2017 at 11:19:03PM +0200, Richard Weinberger wrote: > This feature is another abuser of set_fs(). > Reading proc files from the host side is a debugging feature > with no security checks at all. The path is not sanitized, therefore > any file could be read. ITYM "any file on procfs

[uml-devel] [RFC][PATCH] um: Remove proc command from mconsole

2017-05-21 Thread Richard Weinberger
This feature is another abuser of set_fs(). Reading proc files from the host side is a debugging feature with no security checks at all. The path is not sanitized, therefore any file could be read. Let's get rid of it. Signed-off-by: Richard Weinberger --- Hi! Unless I miss something is feature