You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Kees Cook 4ae69e6b71 mmap_min_addr check CAP_SYS_RAWIO only for write ... Redirecting directly to lsm, here's the patch discussed on lkml: http://lkml.org/lkml/2010/4/22/219 The mmap_min_addr value is useful information for an admin to see without being root ("is my system vulnerable to kernel NULL pointer attacks?") and its setting is trivially easy for an attacker to determine by calling mmap() in PAGE_SIZE increments starting at 0, so trying to keep it private has no value. Only require CAP_SYS_RAWIO if changing the value, not reading it. Comment from Serge : Me, I like to write my passwords with light blue pen on dark blue paper, pasted on my window - if you're going to get my password, you're gonna get a headache. Signed-off-by: Kees Cook <kees.cook@canonical.com> Acked-by: Serge Hallyn <serue@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org> (cherry picked from commit 822cceec72)		15 years ago
..
integrity/ima	…
keys	KEYS: call_sbin_request_key() must write lock keyrings before modifying them	15 years ago
selinux	…
smack	…
tomoyo	…
Kconfig	…
Makefile	…
capability.c	…
commoncap.c	…
device_cgroup.c	…
inode.c	security: testing the wrong variable in create_by_name()	15 years ago
lsm_audit.c	…
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	15 years ago
security.c	…