Re: [kernel-hardening] How to temporary change 'current' (task)

Vasiliy Kulikov
2011-06-17T10:01:54Z

On Fri, Jun 17, 2011 at 13:25 +0400, Vasiliy Kulikov wrote:
> On Fri, Jun 17, 2011 at 12:59 +0400, Solar Designer wrote:
> > On Fri, Jun 17, 2011 at 12:36:51PM +0400, Vasiliy Kulikov wrote:
> > > I wonder whether there is a simple way to temporary switch 'current' to
> > > another task and then switch it back with minimum side effects?

BTW, as HARDEN_PROC restricts not only procfs, but also netlink sockets,
it should be moved into sysctls. I think about (according to already
implemented dmesg_restricted and kptr_restricted):

kernel.proc_restricted

kernel.proc_restricted_gid

And, as net restriction is no more associated with proc restrictions:

net.core.conninfo_restricted

net.core.conninfo_restricted_gid

Thanks,

--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments