Re: [PATCH v2] prctl: remove one-shot limitation for changing exe link

2016-10-20 Thread Stanislav Kinsburskiy
Gentlemen, ping. Let's decide something, how to get rid of this strange solution. It doesn't provide the security it was aimed to, looks ugly and obfuscates the user of the feature. It looks like it can be just thrown away. But if not, please, advice, what should be changed to make is safe a

[PATCH v2] prctl: remove one-shot limitation for changing exe link

2016-09-27 Thread Stanislav Kinsburskiy
This limitation came with the reason to remove "another way for malicious code to obscure a compromised program and masquerade as a benign process" by allowing "security-concious program can use this prctl once during its early initialization to ensure the prctl cannot later be abused for this purp