Re: [PATCH] getrusage sucks

[Chris Wright]

* David Wagner (daw@xxxxxxxxxxxxxxx) wrote:
> Chris Wright  wrote:
> >It's already available via /proc w/out protection.  And ditto via posix
> >cpu timers.
> 
> If so, maybe that code should be fixed.  Where exactly in /proc would
> I find the getrusage() info of another process?

Just from /proc/[pid]/stat. (fs/proc/array.c::do_task_stat).

> Is there any argument
> that disclosing it to everyone is safe?  Or is it just that no one has
> ever given the security considerations much thought up till now?

I guess it keeps falling in the "too theoretical" category.  It can be
protected by policy, but default is open.

thanks,
-chris
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/