diff options
| author | Al Viro <viro@ZenIV.linux.org.uk> | 2008-01-02 14:09:57 +0000 |
|---|---|---|
| committer | Linus Torvalds <torvalds@woody.linux-foundation.org> | 2008-01-02 13:13:27 -0800 |
| commit | 831830b5a2b5d413407adf380ef62fe17d6fcbf2 (patch) | |
| tree | b08f54f15374b5b98b0b3bea20a1d2ea8d1f50e0 /fs/proc/internal.h | |
| parent | ac40532ef0b8649e6f7f83859ea0de1c4ed08a19 (diff) | |
| download | linux-stable-831830b5a2b5d413407adf380ef62fe17d6fcbf2.tar.gz linux-stable-831830b5a2b5d413407adf380ef62fe17d6fcbf2.tar.bz2 linux-stable-831830b5a2b5d413407adf380ef62fe17d6fcbf2.zip | |
restrict reading from /proc/<pid>/maps to those who share ->mm or can ptrace pid
Contents of /proc/*/maps is sensitive and may become sensitive after
open() (e.g. if target originally shares our ->mm and later does exec
on suid-root binary).
Check at read() (actually, ->start() of iterator) time that mm_struct
we'd grabbed and locked is
- still the ->mm of target
- equal to reader's ->mm or the target is ptracable by reader.
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Acked-by: Rik van Riel <riel@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/proc/internal.h')
| -rw-r--r-- | fs/proc/internal.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/proc/internal.h b/fs/proc/internal.h index 1820eb2ef762..05b3e9006262 100644 --- a/fs/proc/internal.h +++ b/fs/proc/internal.h @@ -27,6 +27,8 @@ struct vmalloc_info { unsigned long largest_chunk; }; +extern struct mm_struct *mm_for_maps(struct task_struct *); + #ifdef CONFIG_MMU #define VMALLOC_TOTAL (VMALLOC_END - VMALLOC_START) extern void get_vmalloc_info(struct vmalloc_info *vmi); |