summaryrefslogtreecommitdiffstats
path: root/fs/exec.c
diff options
context:
space:
mode:
authorDjalal Harouni <tixxdz@opendz.org>2014-04-07 15:38:38 -0700
committerLinus Torvalds <torvalds@linux-foundation.org>2014-04-07 16:36:05 -0700
commit32ed74a4b968a4faff7aaaff557035ce5d5e70ab (patch)
treec03255e24b352eadc03c568a91ea205aac782879 /fs/exec.c
parent35a35046e4f9d8849e727b0e0f6edac0ece4ca6e (diff)
downloadop-kernel-dev-32ed74a4b968a4faff7aaaff557035ce5d5e70ab.zip
op-kernel-dev-32ed74a4b968a4faff7aaaff557035ce5d5e70ab.tar.gz
procfs: make /proc/*/pagemap 0400
The /proc/*/pagemap contain sensitive information and currently its mode is 0444. Change this to 0400, so the VFS will prevent unprivileged processes from getting file descriptors on arbitrary privileged /proc/*/pagemap files. This reduces the scope of address space leaking and bypasses by protecting already running processes. Signed-off-by: Djalal Harouni <tixxdz@opendz.org> Acked-by: Kees Cook <keescook@chromium.org> Acked-by: Andy Lutomirski <luto@amacapital.net> Cc: Eric W. Biederman <ebiederm@xmission.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Oleg Nesterov <oleg@redhat.com> Cc: Ingo Molnar <mingo@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/exec.c')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud