[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bits from the Security Team



On Fri, Mar  7, 2014 at 18:41:02 +0100, Jakub Wilk wrote:

> * Vincent Danjean <vdanjean.ml@free.fr>, 2014-03-07, 15:41:
> >>hidepid=1 means users may not access any /proc/<pid>/
> >>directories but their own.
> >
> >Even that is strange. I just tried. Processus that are not mine
> >are not shown anymore by ps, but even some of mine disappeared!
> >(mostly urxvt ones)
> 
> $ ls -l /usr/bin/urxvt
> -rwxr-sr-x 1 root utmp 1272864 Dec 22 18:50 /usr/bin/urxvt
> 
> It's setgid, so it can't be ptraced, so it doesn't show up in /proc.
> 
> The inability to see your own setgid processes makes this feature
> unappealing. :(
> 
Any reason urxvt can't use libutempter?

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature


Reply to: