On Tuesday 2010-03-23 15:55, Patrick McHardy wrote: >>>> -MODULE_PARM_DESC(ip_list_uid,"owner of /proc/net/xt_recent/* files"); >>>> -MODULE_PARM_DESC(ip_list_gid,"owning group of /proc/net/xt_recent/* files"); >>>> +MODULE_PARM_DESC(ip_list_uid, "default owner of /proc/net/xt_recent/* files"); >>>> +MODULE_PARM_DESC(ip_list_gid, "default owning group of /proc/net/xt_recent/* files"); >>>> >>> So what will be updating the permissions of the existing proc files? >> >> The administrator with the use of chmod/chown/chgrp. > >I'm not sure whether this will have the desired effect. I vaguely >recall that proc used to forget about permission changes. That might >have been fixed, but I was unable to find something in the >changelogs. I believe that the procfs alzheimer only applies to entries that are dynamically created during dentry lookup, e.g. all the things in /proc/1234. You will note that the inode numbers of these entries changes over time. This is not the case however for anything created with proc_create_data AFAICT. 16:04 linux:~ # ls -il /proc/1/stat 13294 -r--r--r-- 1 root root 0 Mar 23 16:04 /proc/1/stat 16:04 linux:~ # ls -il /proc/net/xt_recent/foo 4026532102 -rw-r--r-- 1 bin root 0 Mar 23 16:04 /proc/net/xt_recent/foo # Drive out cached stuff 16:04 linux:~ # find / -xdev -type f -print0 | xargs -0 cat >/dev/null 16:04 linux:~ # echo 3 >/proc/sys/vm/drop_caches 16:04 linux:~ # ls -il /proc/1/stat 13399 -r--r--r-- 1 root root 0 Mar 23 16:04 /proc/1/stat 16:04 linux:~ # ls -il /proc/net/xt_recent/foo 4026532102 -rw-r--r-- 1 bin root 0 Mar 23 16:04 /proc/net/xt_recent/foo As you can see, /proc/X was reinstantiated, while xt_recent's data remained. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
