* [PATCH] Fix docs for fs.suid_dumpable (#6145)
@ 2006-08-17 22:26 Alexey Dobriyan
2006-08-18 23:07 ` Andrew Morton
0 siblings, 1 reply; 2+ messages in thread
From: Alexey Dobriyan @ 2006-08-17 22:26 UTC (permalink / raw)
To: Andrew Morton; +Cc: linux-kernel
Sergey Vlasov noticed that there is not kernel.suid_dumpable,
but fs.suid_dumpable.
How KERN_SETUID_DUMPABLE ended up in fs_table[]? Hell knows...
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
---
Documentation/sysctl/fs.txt | 20 ++++++++++++++++++++
Documentation/sysctl/kernel.txt | 20 --------------------
2 files changed, 20 insertions(+), 20 deletions(-)
--- a/Documentation/sysctl/fs.txt
+++ b/Documentation/sysctl/fs.txt
@@ -25,6 +25,7 @@ Currently, these files are in /proc/sys/
- inode-state
- overflowuid
- overflowgid
+- suid_dumpable
- super-max
- super-nr
@@ -131,6 +132,25 @@ The default is 65534.
==============================================================
+suid_dumpable:
+
+This value can be used to query and set the core dump mode for setuid
+or otherwise protected/tainted binaries. The modes are
+
+0 - (default) - traditional behaviour. Any process which has changed
+ privilege levels or is execute only will not be dumped
+1 - (debug) - all processes dump core when possible. The core dump is
+ owned by the current user and no security is applied. This is
+ intended for system debugging situations only. Ptrace is unchecked.
+2 - (suidsafe) - any binary which normally would not be dumped is dumped
+ readable by root only. This allows the end user to remove
+ such a dump but not access it directly. For security reasons
+ core dumps in this mode will not overwrite one another or
+ other files. This mode is appropriate when adminstrators are
+ attempting to debug problems in a normal environment.
+
+==============================================================
+
super-max & super-nr:
These numbers control the maximum number of superblocks, and
--- a/Documentation/sysctl/kernel.txt
+++ b/Documentation/sysctl/kernel.txt
@@ -50,7 +50,6 @@ show up in /proc/sys/kernel:
- shmmax [ sysv ipc ]
- shmmni
- stop-a [ SPARC only ]
-- suid_dumpable
- sysrq ==> Documentation/sysrq.txt
- tainted
- threads-max
@@ -310,25 +309,6 @@ kernel. This value defaults to SHMMAX.
==============================================================
-suid_dumpable:
-
-This value can be used to query and set the core dump mode for setuid
-or otherwise protected/tainted binaries. The modes are
-
-0 - (default) - traditional behaviour. Any process which has changed
- privilege levels or is execute only will not be dumped
-1 - (debug) - all processes dump core when possible. The core dump is
- owned by the current user and no security is applied. This is
- intended for system debugging situations only. Ptrace is unchecked.
-2 - (suidsafe) - any binary which normally would not be dumped is dumped
- readable by root only. This allows the end user to remove
- such a dump but not access it directly. For security reasons
- core dumps in this mode will not overwrite one another or
- other files. This mode is appropriate when adminstrators are
- attempting to debug problems in a normal environment.
-
-==============================================================
-
tainted:
Non-zero if the kernel has been tainted. Numeric values, which
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] Fix docs for fs.suid_dumpable (#6145)
2006-08-17 22:26 [PATCH] Fix docs for fs.suid_dumpable (#6145) Alexey Dobriyan
@ 2006-08-18 23:07 ` Andrew Morton
0 siblings, 0 replies; 2+ messages in thread
From: Andrew Morton @ 2006-08-18 23:07 UTC (permalink / raw)
To: Alexey Dobriyan; +Cc: linux-kernel
On Fri, 18 Aug 2006 02:26:52 +0400
Alexey Dobriyan <adobriyan@gmail.com> wrote:
> Sergey Vlasov noticed that there is not kernel.suid_dumpable,
> but fs.suid_dumpable.
Ho hum.
> How KERN_SETUID_DUMPABLE ended up in fs_table[]? Hell knows...
The tables in kernel/sys.c are a common source of patch conflicts.
patch(1) likes to solve this problem by putting new additions into the
wrong array.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-08-18 23:07 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-08-17 22:26 [PATCH] Fix docs for fs.suid_dumpable (#6145) Alexey Dobriyan
2006-08-18 23:07 ` Andrew Morton
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®