Re: [PATCH] proc: avoid leaking eip, esp, or wchan to non-privileged processes (fwd)

Jake Edge
2009-05-04T01:11:39Z

On Mon, 4 May 2009 09:27:29 +1000 (EST) James Morris wrote:
> This patch needs some review.

Indeed.

> Note that stable@kernel.org typically backport already-reviewed and
> applied patches. I think security@kernel.org is for reporting
> problems in a non-public way (whereas, this is already public
> knowledge).

I realize (now :) that I didn't get this out to all of the right folks,
thanks for doing that. I didn't realize security@kernel.org was only
for non-public security problems, though. Maybe there needs to be a
'security maintainer' separate from that list? Or maybe there is one
and I just didn't find that person in MAINTAINERS?

It would seem that the 'start_stack' value output by /proc/pid/stat
should also only be available to processes that can ptrace ... that was
not part of my original patch, but I think should be added ...

jake