Re: [kernel-hardening] [RFC 2/5 v4] procfs: add hidepid= and gid= mount options

Solar Designer
2011-06-20T14:47:39Z

Vasiliy,

On Mon, Jun 20, 2011 at 06:35:50PM +0400, Vasiliy Kulikov wrote:
> I didn't post a patch with taskstats and sysctl variables to LKML yet
> (only the changes in ptrace/capabilities code).

I don't understand the rationale behind the latter. I can try to guess,
but I'd prefer to see a simple explanation from you. (Maybe I missed
one.) It sounds like you're going to spend considerable time on those
changes, but it is not clear to me whether they're needed or not.

So please explain (maybe in a more proper thread than this one).

Unfortunately, I won't have time to participate in a discussion on this
today (nor in the following few days), but I'd like to be informed
anyway and maybe others will comment.

Thanks,

Alexander