Re: [kernel-hardening] Re: [RFC PATCH 2/2] mm: restrict access to /proc/slabinfo

From: Pekka Enberg
Date: Mon Sep 19 2011 - 14:46:58 EST


On Mon, Sep 19, 2011 at 8:58 PM, Vasiliy Kulikov <segoon@xxxxxxxxxxxx> wrote:
>> Isn't this
>> much stronger protection especially if you combine that with /proc/slabinfo
>> restriction?
>
> I don't see any reason to change allocators if we close slabinfo.

OK, so what about /proc/meminfo, sysfs, 'perf kmem', and other kernel interfaces
through which you can get direct or indirect information about kernel memory
allocations?

Pekka
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/