Vasiliy Kulikov 1d1221f375 proc: restrict access to /proc/PID/io ... /proc/PID/io may be used for gathering private information. E.g. for openssh and vsftpd daemons wchars/rchars may be used to learn the precise password length. Restrict it to processes being able to ptrace the target process. ptrace_may_access() is needed to prevent keeping open file descriptor of "io" file, executing setuid binary and gathering io information of the setuid'ed process. Signed-off-by: Vasiliy Kulikov <segoon@openwall.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2011-06-28 09:39:11 -07:00
..
9p	…
adfs	…
affs	…
afs	AFS: Use i_generation not i_version for the vnode uniquifier	2011-06-16 11:44:48 -04:00
autofs4	…
befs	…
bfs	…
btrfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable	2011-06-27 13:32:14 -07:00
cachefiles	…
ceph	ceph: unwind canceled flock state	2011-06-07 21:36:45 -07:00
cifs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6	2011-06-26 19:40:31 -07:00
coda	coda_ioctl_permission() is safe in RCU mode	2011-06-20 10:44:19 -04:00
configfs	…
cramfs	…
debugfs	…
devpts	…
dlm	…
ecryptfs	…
efs	…
exofs	…
exportfs	…
ext2	…
ext3	…
ext4	ext4: fixed tracepoints cleanup	2011-06-06 09:51:52 -04:00
fat	…
freevxfs	…
fscache	…
fuse	more conservative S_NOSEC handling	2011-06-03 18:24:58 -04:00
gfs2	Merge git://git.kernel.org/pub/scm/linux/kernel/git/steve/gfs2-2.6-fixes	2011-06-07 18:44:10 -07:00
hfs	…
hfsplus	…
hostfs	…
hpfs	…
hppfs	…
hugetlbfs	…
isofs	isofs: fix bh leak in isofs_fill_super() error case	2011-06-18 07:25:42 -07:00
jbd	…
jbd2	jbd2: Fix oops in jbd2_journal_remove_journal_head()	2011-06-13 15:38:22 -04:00
jffs2	…
jfs	jfs: agstart field must be 64 bits	2011-06-20 17:53:24 -05:00
lockd	NLM: Don't hang forever on NLM unlock requests	2011-06-15 11:24:27 -04:00
logfs	logfs doesn't need ->permission() at all	2011-06-20 10:44:26 -04:00
minix	…
ncpfs	…
nfs	NFS: Fix decode_secinfo_maxsz	2011-06-21 11:54:07 -04:00
nfs_common	…
nfsd	nfsd4: fix break_lease flags on nfsd open	2011-06-20 10:38:01 -04:00
nilfs2	nilfs2_permission() doesn't need to bail out in RCU mode	2011-06-20 10:44:33 -04:00
nls	…
notify	…
ntfs	…
ocfs2	more conservative S_NOSEC handling	2011-06-03 18:24:58 -04:00
omfs	Remove unneeded version.h includes from fs/	2011-06-24 08:34:22 -07:00
openpromfs	…
partitions	…
proc	proc: restrict access to /proc/PID/io	2011-06-28 09:39:11 -07:00
pstore	…
qnx4	…
quota	…
ramfs	…
reiserfs	reiserfs_permission() doesn't need to bail out in RCU mode	2011-06-20 10:45:21 -04:00
romfs	romfs: fix romfs_get_unmapped_area() argument check	2011-06-27 18:00:12 -07:00
squashfs	…
sysfs	Delay struct net freeing while there's a sysfs instance refering to it	2011-06-12 17:45:41 -04:00
sysv	…
ubifs	ubifs: dereferencing an ERR_PTR in ubifs_mount()	2011-06-20 10:42:34 -04:00
udf	…
ufs	…
xfs	xfs: prevent bogus assert when trying to remove non-existent attribute	2011-06-23 22:13:51 -05:00
Kconfig	…
Kconfig.binfmt	…
Makefile	…
aio.c	…
anon_inodes.c	…
attr.c	…
bad_inode.c	bad_inode_permission() is safe from RCU mode	2011-06-20 10:44:00 -04:00
binfmt_aout.c	…
binfmt_elf.c	…
binfmt_elf_fdpic.c	…
binfmt_em86.c	…
binfmt_flat.c	…
binfmt_misc.c	…
binfmt_script.c	…
binfmt_som.c	…
bio-integrity.c	…
bio.c	…
block_dev.c	block: use the passed in @bdev when claiming if partno is zero	2011-06-13 12:45:48 +02:00
buffer.c	vfs: Fix data corruption after failed write in __block_write_begin()	2011-06-16 11:44:46 -04:00
char_dev.c	…
compat.c	…
compat_binfmt_elf.c	…
compat_ioctl.c	…
dcache.c	…
dcookies.c	…
direct-io.c	…
drop_caches.c	…
eventfd.c	…
eventpoll.c	…
exec.c	KEYS/DNS: Fix ____call_usermodehelper() to not lose the session keyring	2011-06-17 09:40:48 -07:00
fcntl.c	…
fhandle.c	…
fifo.c	…
file.c	…
file_table.c	…
filesystems.c	…
fs-writeback.c	…
fs_struct.c	…
generic_acl.c	…
inode.c	mm: fix assertion mapping->nrpages == 0 in end_writeback()	2011-06-27 18:00:13 -07:00
internal.h	…
ioctl.c	…
ioprio.c	…
libfs.c	…
locks.c	…
mbcache.c	…
mpage.c	…
namei.c	fix comment in generic_permission()	2011-06-20 10:45:56 -04:00
namespace.c	…
nfsctl.c	…
no-block.c	…
open.c	…
pipe.c	…
pnode.c	…
pnode.h	…
posix_acl.c	…
read_write.c	…
read_write.h	…
readdir.c	…
select.c	…
seq_file.c	…
signalfd.c	…
splice.c	…
stack.c	…
stat.c	…
statfs.c	…
super.c	more conservative S_NOSEC handling	2011-06-03 18:24:58 -04:00
sync.c	…
timerfd.c	timerfd: Fix wakeup of processes when timer is cancelled on clock change	2011-06-14 11:46:14 +02:00
utimes.c	…
xattr.c	…
xattr_acl.c	…