Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

2024-03-04 Thread Kees Cook
On Mon, Mar 04, 2024 at 02:06:43PM +, Adrian Ratiu wrote: > On Saturday, March 02, 2024 01:55 EET, Kees Cook > wrote: > > On Fri, Mar 01, 2024 at 11:34:42PM +0200, Adrian Ratiu wrote: > > > [...] > > > +# define PROC_PID_MEM_MODE S_IRUSR > > > +#else > > > +# define PROC_PID_MEM_MODE (S_IRUSR

Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

2024-03-04 Thread Adrian Ratiu
On Saturday, March 02, 2024 01:55 EET, Kees Cook wrote: > On Fri, Mar 01, 2024 at 11:34:42PM +0200, Adrian Ratiu wrote: > > Prior to v2.6.39 write access to /proc//mem was restricted, > > after which it got allowed in commit 198214a7ee50 ("proc: enable > > writing to /proc/pid/mem"). Famous last

Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

2024-03-02 Thread Adrian Ratiu
On Saturday, March 02, 2024 01:55 EET, Kees Cook wrote: > On Fri, Mar 01, 2024 at 11:34:42PM +0200, Adrian Ratiu wrote: > > Prior to v2.6.39 write access to /proc//mem was restricted, > > after which it got allowed in commit 198214a7ee50 ("proc: enable > > writing to /proc/pid/mem"). Famous last

Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

2024-03-01 Thread Kees Cook
On Fri, Mar 01, 2024 at 11:34:42PM +0200, Adrian Ratiu wrote: > Prior to v2.6.39 write access to /proc//mem was restricted, > after which it got allowed in commit 198214a7ee50 ("proc: enable > writing to /proc/pid/mem"). Famous last words from that patch: > "no longer a security hazard". :) > > Af