From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756412Ab1LEW4E (ORCPT ); Mon, 5 Dec 2011 17:56:04 -0500 Received: from mail-iy0-f174.google.com ([209.85.210.174]:53334 "EHLO mail-iy0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756127Ab1LEW4C (ORCPT ); Mon, 5 Dec 2011 17:56:02 -0500 Date: Mon, 5 Dec 2011 14:55:32 -0800 (PST) From: Hugh Dickins X-X-Sender: hugh@sister.anvils To: Vasiliy Kulikov cc: kernel-hardening@lists.openwall.com, Andrew Morton , linux-kernel@vger.kernel.org, Alexey Dobriyan , Al Viro , "H. Peter Anvin" , Greg KH , Theodore Tso , Alan Cox , James Morris , Oleg Nesterov Subject: Re: [RFC v2 2/3] procfs: add hidepid= and gid= mount options In-Reply-To: <20111119110212.GB11468@albatros> Message-ID: References: <20111119110126.GA11468@albatros> <20111119110212.GB11468@albatros> User-Agent: Alpine 2.00 (LSU 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, 19 Nov 2011, Vasiliy Kulikov wrote: > This patch adds support of mount options to restrict access to > /proc/PID/ directories. The default backward-compatible "relaxed" > behaviour is left untouched. This patch, in 3.2.0-rc3-next-20111202, leaks tasks: watch while :; do ps; grep KernelStack /proc/meminfo; sleep 1; done Hugh