[kernel-hardening] Re: [RFC v1] debugfs mount options

Vasiliy Kulikov
2011-06-05T18:30:27Z

[-- Attachment #1: Type: text/plain, Size: 663 bytes --]

On Sun, Jun 05, 2011 at 22:28 +0400, Vasiliy Kulikov wrote:
> While implementing it, I realized that it is probably more usefull to
> implement it as 2 sysctls and CONFIG_DEBUGFS_* options - a lot of
> debugfs files are created at the boot time, so it makes sense to change
> these setting at the compile time and not to bother with chmod'ing
> already created files.

The same for configfs. However, I'm hesitating to mention sysfs as it
will be divided into well defined per-namespace parts in the future and
global sysfs umask would be confusing.

--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments