Re: [PATCH 1/5] proc: make /proc/*/cmdline go through LSM
From: Andrew Morton
Date: Thu Apr 19 2018 - 20:02:22 EST
On Wed, 21 Feb 2018 22:23:39 +0300 Alexey Dobriyan <adobriyan@xxxxxxxxx> wrote:
> /proc/*/cmdline is not different from /proc/*/environ as it accesses
> target task's memory (and can access the very same region of memory)
> but it doesn't go through ptrace_may_access() and thus doesn't go through LSM.
This change can cause existing code to break, no?
I'd like to see, in the changelog, a full explanation of why this won't
break any existing setup?