[PATCH] subsystem: proc filesystem

From: tux2002
Date: Thu Dec 13 2012 - 08:48:46 EST



This patch strengthens file permissions of pid record in proc filesystem. When pid and pidentry records created, his permissions strengthens by creator umask.

./scripts/get_maintainer.pl: No supported VCS found. Add --nogit to options?
Using a git repository produces better results.
Try Linus Torvalds' latest git repository using:
git clone git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
linux-kernel@xxxxxxxxxxxxxxx (open list)


---
--- linux-3.7/fs/proc/base.c.orig 2012-12-11 06:30:57.000000000 +0300
+++ linux-3.7/fs/proc/base.c 2012-12-13 16:48:59.000000000 +0300
@@ -2035,6 +2035,7 @@ static struct dentry *proc_pident_instan

ei = PROC_I(inode);
inode->i_mode = p->mode;
+ inode->i_mode &= ~(mode_t) get_current()->fs->umask;
if (S_ISDIR(inode->i_mode))
set_nlink(inode, 2); /* Use getattr to fix if necessary */
if (p->iop)
@@ -2856,7 +2857,8 @@ static struct dentry *proc_pid_instantia
if (!inode)
goto out;

- inode->i_mode = S_IFDIR|S_IRUGO|S_IXUGO;
+ inode->i_mode = S_IFDIR|S_IRUGO|S_IWUSR|S_IXUGO;
+ inode->i_mode &= ~(mode_t) get_current()->fs->umask;
inode->i_op = &proc_tgid_base_inode_operations;
inode->i_fop = &proc_tgid_base_operations;
inode->i_flags|=S_IMMUTABLE;
---
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/