On Mon, Dec 01, 2003 at 05:10:24PM +1300, Volker Kuhlmann wrote:
> > > > > > zcat /proc/config.gz

> > The seq_file interface added during 2.5 made it feasible and safe.

> I don't understand. Reading out a few const chars poses a security
> risk?  Or perhaps is it the information in there? I'd imagine kernel
> features could be tested for relatively easily. If you're that
> paranoid, turn it off + recompile.

It has nothing to do with security.  Prior to the seq_file inteface,
procfs did not have a safe way of exporting data > PAGE_SIZE (I think it
was) to userland.

-mjg
-- 
Matthew Gregan                     |/
                                  /|                [EMAIL PROTECTED]

Reply via email to