[PATCH 02/12] procfs: add proc_allow_access() to check if file's opener may access task

2013-09-25 Thread Djalal Harouni
Since /proc entries varies at runtime, permission checks need to happen during each system call. However even with that /proc file descriptors can be passed to a more privileged process (e.g. a suid-exec) which will pass the classic ptrace_may_access() permission check. The open() call will be

[PATCH 02/12] procfs: add proc_allow_access() to check if file's opener may access task

2013-09-25 Thread Djalal Harouni
Since /proc entries varies at runtime, permission checks need to happen during each system call. However even with that /proc file descriptors can be passed to a more privileged process (e.g. a suid-exec) which will pass the classic ptrace_may_access() permission check. The open() call will be