Re: Bits from the Security Team
* Vincent Danjean <vdanjean.ml@free.fr>, 2014-03-07, 15:41:
hidepid=1 means users may not access any /proc/<pid>/ directories but
their own.
Even that is strange. I just tried. Processus that are not mine are not
shown anymore by ps, but even some of mine disappeared! (mostly urxvt
ones)
$ ls -l /usr/bin/urxvt
-rwxr-sr-x 1 root utmp 1272864 Dec 22 18:50 /usr/bin/urxvt
It's setgid, so it can't be ptraced, so it doesn't show up in /proc.
The inability to see your own setgid processes makes this feature
unappealing. :(
--
Jakub Wilk
Reply to: