[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110810112522.GB30492@openwall.com>
Date: Wed, 10 Aug 2011 15:25:22 +0400
From: Solar Designer <solar@...nwall.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: procfs {tid,tgid,attr}_allowed mount options
Vasiliy,
On Thu, Aug 04, 2011 at 03:23:31PM +0400, Vasiliy Kulikov wrote:
> New version. Cleanups/fixes here and there.
>
> It lacks net/ restriction, but IMO it is already complicated enough
> (more than 500 new lines). Such (relatively) simple thing as
> net_allowed= is an additional care. I'd achieve at least processes
> restrictions in upstream, after it will come networking.
That's a lot of code already. I tried reviewing it, but I felt that I
need an English description of its functionality first. Perhaps you're
preparing one for posting to LKML anyway - can you please post it in
here first?
Thanks,
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
