From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail138.messagelabs.com (mail138.messagelabs.com [216.82.249.35]) by kanga.kvack.org (Postfix) with ESMTP id C3F509000BD for ; Fri, 30 Sep 2011 16:13:58 -0400 (EDT) Received: by bkbzs2 with SMTP id zs2so2769715bkb.14 for ; Fri, 30 Sep 2011 13:13:55 -0700 (PDT) Date: Sat, 1 Oct 2011 00:12:56 +0400 From: Vasiliy Kulikov Subject: Re: [PATCH 2/2] mm: restrict access to /proc/meminfo Message-ID: <20110930201256.GB5173@albatros> References: <20110927175453.GA3393@albatros> <20110927175642.GA3432@albatros> <20110927193810.GA5416@albatros> <20110928144614.38591e97.akpm00@gmail.com> <20110930195329.GA2020@albatros> <20110930130353.0da54517.akpm00@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20110930130353.0da54517.akpm00@gmail.com> Sender: owner-linux-mm@kvack.org List-ID: To: Andrew Morton Cc: kernel-hardening@lists.openwall.com, Christoph Lameter , Pekka Enberg , Matt Mackall , linux-mm@kvack.org, Kees Cook , Dave Hansen , Valdis.Kletnieks@vt.edu, Linus Torvalds , David Rientjes , Alan Cox , linux-kernel@vger.kernel.org, Andrew Morton On Fri, Sep 30, 2011 at 13:03 -0700, Andrew Morton wrote: > meminfo has been around for a very long time and is a convenient and > centralised point for collecting memory data. There will be a large > number of apps/scripts/tools out there which use it. Many of these > won't even be available to us. > > All of which makes it very hard for us to predict how much breakage we > will cause. > > > If we care about (2), we should pass non-zero counters, but imagine some > > default values, which will result in sane processes numbers. But it > > might depend on specific applications, I'm not aware whether (2) is > > real. > > > > > > Other ideas? > > echo "chmod 0400 /proc/meminfo" >> /etc/rc.local How will it help to fix apps' dependencies on meminfo? -- Vasiliy Kulikov http://www.openwall.com - bringing security into open computing environments -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: email@kvack.org