Re: [PATCH] proc: avoid leaking eip, esp, or wchan to non-privileged processes (fwd)

[Jake Edge <jake@lwn.net>]

On Mon, 4 May 2009 09:27:29 +1000 (EST) James Morris wrote:
> This patch needs some review.

Indeed.

> Note that stable@kernel.org typically backport already-reviewed and 
> applied patches.  I think security@kernel.org is for reporting
> problems in a non-public way (whereas, this is already public
> knowledge).

I realize (now :) that I didn't get this out to all of the right folks,
thanks for doing that.  I didn't realize security@kernel.org was only
for non-public security problems, though.  Maybe there needs to be a
'security maintainer' separate from that list?  Or maybe there is one
and I just didn't find that person in MAINTAINERS?

It would seem that the 'start_stack' value output by /proc/pid/stat
should also only be available to processes that can ptrace ... that was
not part of my original patch, but I think should be added ...

jake

-- 
Jake Edge - LWN - jake@lwn.net - http://lwn.net