Re: [PATCH 2.6.13.1] Patch for invisible threads

Al Viro
2005-09-13T17:12:22Z

On Tue, Sep 13, 2005 at 10:01:58AM -0700, Linus Torvalds wrote:
>
>
> On Tue, 13 Sep 2005, Al Viro wrote:
> >
> > What we need is to decide what kind of access control do we really want on
> > /proc/<pid>/task. That's it.
>
> I don't think any controls at all. The real control should then be on the
> /proc/<pid>/task/<tid> access, which should be the same as the /proc/<pid>
> controls (except for thread <tid> rather than thread <pid>, of course)

Well... If exposing the list of tasks in a group is OK, we can just leave
->permission NULL for that sucker. If it's not (and arguably it can be
sensitive information), we have a bigger problem - right now chroot boundary
is the only control we have there; normally anyone can ls /proc/<whatever>/task
and see other threads.