Re: Bits from the Security Team
On Thu, Mar 06, 2014 at 12:54:00AM +0100, Vincent Danjean wrote:
> I'm not sure I will let this setup (hidepid=1) on my computers. My
> current POV (that can change) is that I prefer to be able to do the
> maximum of thing as a normal user (top, ps, read log (I'm in the
> adm group), ...) ans switch to root when I really need to do some
> modifications.
You apparently can have a "special" group that can see everything.
That might be worthwhile for a default.
It makes things like pstree look odd, so I'll be expecting some new bug
reports.
Someone might like to fix mount(8) too, especially the bit about procfs
if this is the new default.
- Craig
--
Craig Small (@smallsees) http://enc.com.au/ csmall at : enc.com.au
Debian GNU/Linux http://www.debian.org/ csmall at : debian.org
GPG fingerprint: 5D2F B320 B825 D939 04D2 0519 3938 F96B DF50 FEA5
Reply to: