[PATCH v2 4/9] procfs: make /proc/*/{stack,syscall} 0400

2013-10-01 Thread Djalal Harouni
The /proc/*/{stack,syscall} contain sensitive information and currently its mode is 0444. Change this to 0400 so the VFS will be able to block unprivileged processes from getting file descriptors on arbitrary privileged /proc/*/{stack,syscall} files. This will also avoid doing extra unnecessary

[PATCH v2 4/9] procfs: make /proc/*/{stack,syscall} 0400

2013-10-01 Thread Djalal Harouni
The /proc/*/{stack,syscall} contain sensitive information and currently its mode is 0444. Change this to 0400 so the VFS will be able to block unprivileged processes from getting file descriptors on arbitrary privileged /proc/*/{stack,syscall} files. This will also avoid doing extra unnecessary