Re: [PATCH] Restrict procfs permissions

2005-01-29 Thread Rene Scharfe
Al Viro wrote: On Sat, Jan 29, 2005 at 03:45:42AM +0100, Rene Scharfe wrote: The patch is inspired by the /proc restriction parts of the GrSecurity patch. The main difference is the ability to configure the restrictions dynamically. You can change the umask setting by running # mount -o

Re: [PATCH] Restrict procfs permissions

2005-01-29 Thread Rene Scharfe
Al Viro wrote: On Sat, Jan 29, 2005 at 03:45:42AM +0100, Rene Scharfe wrote: The patch is inspired by the /proc restriction parts of the GrSecurity patch. The main difference is the ability to configure the restrictions dynamically. You can change the umask setting by running # mount -o

Re: [PATCH] Restrict procfs permissions

2005-01-28 Thread Al Viro
On Sat, Jan 29, 2005 at 03:45:42AM +0100, Rene Scharfe wrote: > The patch is inspired by the /proc restriction parts of the GrSecurity > patch. The main difference is the ability to configure the restrictions > dynamically. You can change the umask setting by running > ># mount -o

[PATCH] Restrict procfs permissions

2005-01-28 Thread Rene Scharfe
Hi all, this patch adds a umask option to the proc filesystem. It can be used to restrict the permission of users to view each others process information. E.g. on a multi-user shell server one could use a setting of umask=077 to allow all users to view info about their own processes, only. It

[PATCH] Restrict procfs permissions

2005-01-28 Thread Rene Scharfe
Hi all, this patch adds a umask option to the proc filesystem. It can be used to restrict the permission of users to view each others process information. E.g. on a multi-user shell server one could use a setting of umask=077 to allow all users to view info about their own processes, only. It

Re: [PATCH] Restrict procfs permissions

2005-01-28 Thread Al Viro
On Sat, Jan 29, 2005 at 03:45:42AM +0100, Rene Scharfe wrote: The patch is inspired by the /proc restriction parts of the GrSecurity patch. The main difference is the ability to configure the restrictions dynamically. You can change the umask setting by running # mount -o