From: Luis.F.Correia <Lui...@se...> - 2003-08-08 08:41:32
|
> Hi Luis, > > >>>We do have /proc, but one of our security fixes, > >>grsecurity, disables > >>>access to /proc/kcore. > >> > >>Hmm... I do not "access" it. I just call 'stat("/proc/kcore", > >>&buf)'. I > >>don't understand why this is disabled, I don't see any > >>security reasons > >>here. > > > > If you have /proc/kcore you can open it and read/write the memory > > positions... > > Ok, I understand. grsecurity does not disbale access, but diables > /proc/kcore as a whole? Yes, that's it. BTW, grsec disables most 'critical' aspects of writing into the kernel itself > > > >>>>>The daemon must know about the 'pid' file. can you add support? > > Done, but in CVS only. Could you please test? As soon as I've > got your > Ok, I will release 0.9.10 Cool, I'll try it tonight. |