[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bits from the Security Team



* Vincent Danjean <vdanjean.ml@free.fr>, 2014-03-07, 15:41:
hidepid=1 means users may not access any /proc/<pid>/ directories but their own.

Even that is strange. I just tried. Processus that are not mine are not shown anymore by ps, but even some of mine disappeared! (mostly urxvt ones)

$ ls -l /usr/bin/urxvt
-rwxr-sr-x 1 root utmp 1272864 Dec 22 18:50 /usr/bin/urxvt

It's setgid, so it can't be ptraced, so it doesn't show up in /proc.

The inability to see your own setgid processes makes this feature unappealing. :(

--
Jakub Wilk


Reply to: