From: Vasiliy Kulikov <segoon@openwall.com>
To: kernel-hardening@lists.openwall.com
Subject: [kernel-hardening] Re: [RFC v1] debugfs mount options
Date: Sun, 5 Jun 2011 22:30:27 +0400 [thread overview]
Message-ID: <20110605183027.GA5859@albatros> (raw)
In-Reply-To: <20110605182830.GB5789@albatros>
[-- Attachment #1: Type: text/plain, Size: 663 bytes --]
On Sun, Jun 05, 2011 at 22:28 +0400, Vasiliy Kulikov wrote:
> While implementing it, I realized that it is probably more usefull to
> implement it as 2 sysctls and CONFIG_DEBUGFS_* options - a lot of
> debugfs files are created at the boot time, so it makes sense to change
> these setting at the compile time and not to bother with chmod'ing
> already created files.
The same for configfs. However, I'm hesitating to mention sysfs as it
will be divided into well defined per-namespace parts in the future and
global sysfs umask would be confusing.
--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]
next prev parent reply other threads:[~2011-06-05 18:30 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-06-05 18:28 [kernel-hardening] [RFC v1] debugfs mount options Vasiliy Kulikov
2011-06-05 18:30 ` Vasiliy Kulikov [this message]
2011-06-05 19:44 ` Solar Designer
2011-06-05 20:04 ` Vasiliy Kulikov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20110605183027.GA5859@albatros \
--to=segoon@openwall.com \
--cc=kernel-hardening@lists.openwall.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.