Re: [PATCH AUTOSEL 6.6 048/139] proc: add config & param to block forcing mem writes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 25 Sep 2024, Alexey Dobriyan <adobriyan@xxxxxxxxx> wrote:
On Wed, Sep 25, 2024 at 08:07:48AM -0400, Sasha Levin wrote:
From: Adrian Ratiu <adrian.ratiu@xxxxxxxxxxxxx> [ Upstream commit 41e8149c8892ed1962bd15350b3c3e6e90cba7f4 ] This adds a Kconfig option and boot param to allow removing the FOLL_FORCE flag from /proc/pid/mem write calls because it can be abused.

And this is not a mount option why?

Hello and thanks for asking!

The only reason is nobody asked for it yet. :)

We need to be careful how we do this, so the restriction is still enabled when remounting, otherwise I don't see any impediment, provided we can find a way to make it clean and safe.

I am travelling these weeks (All Systems GO conf) and have a lot going on, so please feel free to send a patch and I'll review it ASAP, otherwise I'll try to come up with something by end of October.

Adrian




[Index of Archives]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Linux FS]     [Yosemite Forum]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]     [Linux Resources]

  Powered by Linux