Re: [PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-05-02 Thread Djalal Harouni
Hello Andy, (Sorry for my late response) On Thu, Apr 27, 2017 at 12:09 AM, Andy Lutomirski wrote: > On Tue, Apr 25, 2017 at 5:23 AM, Djalal Harouni wrote: >> If "limit_pids=1" mount option is set then do not instantiate pids that >> we can not ptrace.

Re: [PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-05-02 Thread Djalal Harouni
Hello Andy, (Sorry for my late response) On Thu, Apr 27, 2017 at 12:09 AM, Andy Lutomirski wrote: > On Tue, Apr 25, 2017 at 5:23 AM, Djalal Harouni wrote: >> If "limit_pids=1" mount option is set then do not instantiate pids that >> we can not ptrace. "limit_pids=1" means that procfs should

Re: [PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-04-26 Thread Andy Lutomirski
On Tue, Apr 25, 2017 at 5:23 AM, Djalal Harouni wrote: > If "limit_pids=1" mount option is set then do not instantiate pids that > we can not ptrace. "limit_pids=1" means that procfs should only contain > pids that the caller can ptrace. > > Cc: Kees Cook

Re: [PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-04-26 Thread Andy Lutomirski
On Tue, Apr 25, 2017 at 5:23 AM, Djalal Harouni wrote: > If "limit_pids=1" mount option is set then do not instantiate pids that > we can not ptrace. "limit_pids=1" means that procfs should only contain > pids that the caller can ptrace. > > Cc: Kees Cook > Cc: Andy Lutomirski > Signed-off-by:

[PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-04-25 Thread Djalal Harouni
If "limit_pids=1" mount option is set then do not instantiate pids that we can not ptrace. "limit_pids=1" means that procfs should only contain pids that the caller can ptrace. Cc: Kees Cook Cc: Andy Lutomirski Signed-off-by: Djalal Harouni

[PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option

2017-04-25 Thread Djalal Harouni
If "limit_pids=1" mount option is set then do not instantiate pids that we can not ptrace. "limit_pids=1" means that procfs should only contain pids that the caller can ptrace. Cc: Kees Cook Cc: Andy Lutomirski Signed-off-by: Djalal Harouni --- fs/proc/base.c | 9 + 1 file changed, 9