On 05/11/2018 02:36 AM, Alexey Gladkov wrote: > From: Djalal Harouni <tixxdz@xxxxxxxxx> > > If "limit_pids=1" mount option is set then do not instantiate pids that > we can not ptrace. "limit_pids=1" means that procfs should only contain > pids that the caller can ptrace. Where can I find documentation on these mount options (pidonly, limit_pids)? Thanks. > Cc: Kees Cook <keescook@xxxxxxxxxxxx> > Cc: Andy Lutomirski <luto@xxxxxxxxxx> > Signed-off-by: Djalal Harouni <tixxdz@xxxxxxxxx> > --- > fs/proc/base.c | 9 +++++++++ > 1 file changed, 9 insertions(+) -- ~Randy