oss-sec mailing list archives

Re: [Security] [oss-security] Re: /proc infoleaks

From: Linus Torvalds <torvalds () linux-foundation org>
Date: Tue, 7 Sep 2010 14:54:58 -0700

On Tue, Sep 7, 2010 at 12:46 PM, Andrew Morton
<akpm () linux-foundation org> wrote:


We're not going to change the kernel defaults, end of story - that
would break far too much stuff.


Hmm. I think the /proc/kallsyms one really is just plain broken. That
should not be world-readable, there's no reason for normal users
reading it.

But I don't see why slabinfo etc should care.

                                  Linus

Current thread:

Re: [Security] /proc infoleaks, (continued)
- Re: [Security] /proc infoleaks Andrew Morton (Sep 07)
  - Re: [Security] /proc infoleaks Sebastian Krahmer (Sep 07)
    - Re: Re: [Security] /proc infoleaks Marcus Meissner (Sep 07)
    - Re: [Security] [oss-security] Re: /proc infoleaks Willy Tarreau (Sep 13)
  - Re: Re: [Security] /proc infoleaks Jon Oberheide (Sep 07)
    - Re: Re: [Security] /proc infoleaks Andrew Morton (Sep 07)
    - Re: [Security] [oss-security] Re: /proc infoleaks Andrew Morton (Sep 07)
    - Re: [Security] [oss-security] Re: /proc infoleaks Brad Spengler (Sep 07)
    - Re: Re: [Security] [oss-security] Re: /proc infoleaks Sebastian Krahmer (Sep 07)
    - Re: Re: [Security] [oss-security] Re: /proc infoleaks Brad Spengler (Sep 08)
    - Re: [Security] [oss-security] Re: /proc infoleaks Linus Torvalds (Sep 07)