Re: [PATCH AUTOSEL 6.6 048/139] proc: add config & param to block forcing mem writes

From: Alexey Dobriyan
Date: Wed Sep 25 2024 - 11:58:23 EST


On Wed, Sep 25, 2024 at 08:07:48AM -0400, Sasha Levin wrote:
> From: Adrian Ratiu <adrian.ratiu@xxxxxxxxxxxxx>
>
> [ Upstream commit 41e8149c8892ed1962bd15350b3c3e6e90cba7f4 ]
>
> This adds a Kconfig option and boot param to allow removing
> the FOLL_FORCE flag from /proc/pid/mem write calls because
> it can be abused.

And this is not a mount option why?

> The traditional forcing behavior is kept as default because
> it can break GDB and some other use cases.
>
> Previously we tried a more sophisticated approach allowing
> distributions to fine-tune /proc/pid/mem behavior, however
> that got NAK-ed by Linus [1], who prefers this simpler
> approach with semantics also easier to understand for users.