Re: [kernel-hardening] /proc/PID directory hiding

Pavel Labushev
2011-06-05T00:10:19Z

05.06.2011 04:20, Vasiliy Kulikov пишет:

>> Is the above on grsecurity?
>
> No, grsecurity hides uid/gid from both *stat*(2) and getdents*(2) functions
> (implemented as proc_pid_readdir() and pid_getattr()).

Yes, it's on grsecurity. Just try it and see.

$ uname -r
2.6.39-grsec
$ find /proc -maxdepth 1 -type d -name 1
$ ls -ld /proc/1
dr-xr-x--- 6 root root 0 Jun 4 21:05 /proc/1