[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110612023916.GC14976@openwall.com>
Date: Sun, 12 Jun 2011 06:39:16 +0400
From: Solar Designer <solar@...nwall.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: [RFC v2] procfs mount options
Vasiliy,
On Wed, Jun 08, 2011 at 09:23:08PM +0400, Vasiliy Kulikov wrote:
> I think this version of the patch is ready for LKML review.
OK, post it - and CC kernel-hardening on your posting, as planned.
(We'll see if we can afford the traffic, or if we need to split this
list in two...)
Unfortunately, I don't have time to review this more closely (in
context), and no one else in here provided any comments. ;-(
> + if (pid->hide_net &&
> + (!capable(CAP_NET_ADMIN) && !in_group_p(pid->pid_gid))) {
As discussed, capable() should be the very last check.
Thanks,
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
