Re: [PATCH] security: Restrict unprivileged access to /proc/config.gz

[Greg KH]

On Sun, Nov 08, 2026 at 03:23:51PM +0100, Vic B wrote:
> When using CONFIG_IKCONFIG_PROC, the built-in configuration is
> world-readable through /proc/config.gz, which somewhat weakens existing
> address hiding defences, as it allows an unprivileged user to simply
> read built-in config from the running kernel and build their own copy
> with identical System.map.
> 
> This patch adds a configuration option to restrict access to
> /proc/config.gz to superuser only.
> 
> Signed-off-by: Vic B <linux@xxxxxxxx>

Full name please.

But really, a .config file is not a secret, this isn't needed, sorry.

greg k-h