Re: [kernel-hardening] /proc/PID directory hiding

Pavel Labushev
2011-06-05T01:18:17Z

>>> Is the above on grsecurity?
>>
>> No, grsecurity hides uid/gid from both *stat*(2) and getdents*(2) functions
>> (implemented as proc_pid_readdir() and pid_getattr()).
>
> Yes, it's on grsecurity. Just try it and see.
>
> $ uname -r
> 2.6.39-grsec
> $ find /proc -maxdepth 1 -type d -name 1
> $ ls -ld /proc/1
> dr-xr-x--- 6 root root 0 Jun 4 21:05 /proc/1

Fixed in the latest grsec patches.