Jake Edge f83ce3e6b0 proc: avoid information leaks to non-privileged processes ... By using the same test as is used for /proc/pid/maps and /proc/pid/smaps, only allow processes that can ptrace() a given process to see information that might be used to bypass address space layout randomization (ASLR). These include eip, esp, wchan, and start_stack in /proc/pid/stat as well as the non-symbolic output from /proc/pid/wchan. ASLR can be bypassed by sampling eip as shown by the proof-of-concept code at http://code.google.com/p/fuzzyaslr/ As part of a presentation (http://www.cr0.org/paper/to-jt-linux-alsr-leak.pdf) esp and wchan were also noted as possibly usable information leaks as well. The start_stack address also leaks potentially useful information. Cc: Stable Team <stable@kernel.org> Signed-off-by: Jake Edge <jake@lwn.net> Acked-by: Arjan van de Ven <arjan@linux.intel.com> Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2009-05-04 15:14:23 -07:00
..
9p	vfs: simple_set_mnt() should return void	2009-03-27 14:44:03 -04:00
adfs	fs/adfs: return f_fsid for statfs(2)	2009-04-02 19:05:08 -07:00
affs	fs/affs: return f_fsid for statfs(2)	2009-04-02 19:05:08 -07:00
afs	AFS: Guard afs_file_readpage_read_complete() definition with CONFIG_AFS_FSCACHE	2009-04-17 09:55:19 -07:00
autofs	Fix autofs_expire()	2009-04-20 23:01:15 -04:00
autofs4	autofs4: fix incorrect return in autofs4_mount_busy()	2009-05-02 15:36:09 -07:00
befs	befs: fix build on parisc	2009-04-08 10:21:43 -07:00
bfs
btrfs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable	2009-04-27 11:16:33 -07:00
cachefiles	CacheFiles: A cache that backs onto a mounted filesystem	2009-04-03 16:42:41 +01:00
cifs	cifs: when renaming don't try to unlink negative dentry	2009-04-17 21:08:15 +00:00
coda	constify dentry_operations: misc filesystems	2009-03-27 14:44:00 -04:00
configfs	configfs: Fix Trivial Warning in fs/configfs/symlink.c	2009-04-21 12:59:21 -07:00
cramfs	fs/cramfs: return f_fsid for statfs(2)	2009-04-02 19:05:08 -07:00
debugfs	debugfs: function to know if debugfs is initialized	2009-03-23 16:25:46 +01:00
devpts	Merge code for single and multiple-instance mounts	2009-03-27 14:44:04 -04:00
dlm	dlm: fix length calculation in compat code	2009-03-11 12:23:59 -05:00
ecryptfs	eCryptfs: Fix min function comparison warning	2009-04-27 13:31:12 -05:00
efs	fs/efs: return f_fsid for statfs(2)	2009-04-02 19:05:09 -07:00
exofs	exofs: Documentation	2009-03-31 19:44:38 +03:00
exportfs
ext2	ext2: missing unlock in ext2_quota_write()	2009-04-27 16:49:52 +02:00
ext3	ext3: Try to avoid starting a transaction in writepage for data=writepage	2009-04-08 13:15:10 -04:00
ext4	ext4: Do not try to validate extents on special files	2009-04-24 18:45:35 -04:00
fat	vfat: Note the NLS requirement	2009-04-17 09:32:11 -07:00
freevxfs
fscache	FS-Cache: Implement data I/O part of netfs API	2009-04-03 16:42:39 +01:00
fuse	fuse: fix "direct_io" private mmap	2009-04-09 17:37:53 +02:00
gfs2	GFS2: Ensure that the inode goal block settings are updated	2009-04-23 10:07:37 +01:00
hfs	hfs: fix memory leak when unmounting	2009-04-13 15:04:29 -07:00
hfsplus	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-04-02 21:09:10 -07:00
hostfs	constify dentry_operations: misc filesystems	2009-03-27 14:44:00 -04:00
hpfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-04-02 21:09:10 -07:00
hppfs	hppfs: hppfs_read_file() may return -ERROR	2009-04-02 19:04:53 -07:00
hugetlbfs	hugetlbfs: return negative error code for bad mount option	2009-04-21 13:41:48 -07:00
isofs	fs/isofs: return f_fsid for statfs(2)	2009-04-02 19:05:09 -07:00
jbd	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4	2009-04-24 08:37:40 -07:00
jbd2	jbd2: use SWRITE_SYNC_PLUG when writing synchronous revoke records	2009-04-14 07:50:56 -04:00
jffs2	Merge git://git.infradead.org/mtd-2.6	2009-04-06 14:56:26 -07:00
jfs	New helper - current_umask()	2009-03-31 23:00:26 -04:00
lockd	Merge branch 'for-2.6.30' of git://linux-nfs.org/~bfields/linux	2009-04-06 13:25:56 -07:00
minix	fs/minix: return f_fsid for statfs(2)	2009-04-02 19:05:09 -07:00
ncpfs	ncpfs: use memdup_user()	2009-04-20 23:02:51 -04:00
nfs	NFS: Close page_mkwrite() races	2009-05-02 19:42:39 -07:00
nfs_common
nfsd	Fix i_mutex vs. readdir handling in nfsd	2009-04-20 23:01:16 -04:00
nilfs2	nilfs2: fix possible mismatch of sufile counters on recovery	2009-04-13 09:53:52 +09:00
nls
notify	fs: avoid I_NEW inodes	2009-03-27 14:44:05 -04:00
ntfs	ntfs: remove private wrapper of endian helpers	2009-04-01 08:59:18 -07:00
ocfs2	Merge branch 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jlbec/ocfs2	2009-05-02 16:30:47 -07:00
omfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-04-02 21:09:10 -07:00
openpromfs
partitions	Merge branch 'tracing/core-v2' into tracing-for-linus	2009-04-02 00:49:02 +02:00
proc	proc: avoid information leaks to non-privileged processes	2009-05-04 15:14:23 -07:00
qnx4	fs/qnx4: return f_fsid for statfs(2)	2009-04-02 19:05:10 -07:00
quota	quota: remove obsolete comments in fs/quota/Makefile	2009-04-27 16:49:52 +02:00
ramfs	ramfs: fix double freeing s_fs_info on failed mount	2009-04-07 07:39:59 -07:00
reiserfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-04-02 21:09:10 -07:00
romfs	ROMFS: Advance destination buffer pointer when reading from a blockdev	2009-04-24 13:28:31 -07:00
smbfs	constify dentry_operations: misc filesystems	2009-03-27 14:44:00 -04:00
squashfs	Merge branch 'kmemtrace-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-04-06 13:30:00 -07:00
sysfs	sysfs: use memdup_user()	2009-04-20 23:02:50 -04:00
sysv	fs/sysv: return f_fsid for statfs(2)	2009-04-02 19:05:10 -07:00
ubifs	Merge branch 'linux-next' of git://git.infradead.org/ubifs-2.6	2009-04-06 15:00:19 -07:00
udf	udf: Don't write integrity descriptor too often	2009-04-02 13:36:28 +02:00
ufs	fs/ufs: return f_fsid for statfs(2)	2009-04-02 19:05:10 -07:00
xfs	Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs	2009-05-02 16:52:50 -07:00
aio.c	aio: lookup_ioctx can return the wrong value when looking up a bogus context	2009-03-19 15:57:18 -07:00
anon_inodes.c	constify dentry_operations: rest	2009-03-27 14:44:03 -04:00
attr.c	vfs: Use lowercase names of quota functions	2009-03-26 02:18:35 +01:00
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c	ptrace: s/parent/real_parent/ in binfmt_elf_fdpic.c	2009-05-02 15:36:10 -07:00
binfmt_elf.c	Trim includes in binfmt_elf	2009-03-31 23:00:27 -04:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
binfmt_som.c	Don't crap into descriptor table in binfmt_som	2009-03-31 23:00:28 -04:00
bio-integrity.c	block: add private bio_set for bio integrity allocations	2009-03-24 12:35:17 +01:00
bio.c	bio: fix memcpy corruption in bio_copy_user_iov()	2009-04-28 20:24:29 +02:00
block_dev.c	Cleanup after commit 585d3bc06f	2009-04-01 07:07:16 -04:00
buffer.c	mm: close page_mkwrite races	2009-05-02 15:36:09 -07:00
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c	fs/compat_ioctl: fix build when !BLOCK	2009-04-20 23:01:16 -04:00
compat.c	do_execve() must not clear fs->in_exec if it was set by another thread	2009-04-24 07:39:45 -07:00
dcache.c	No need for crossing to mountpoint in audit_tag_tree()	2009-04-20 23:01:15 -04:00
dcookies.c
direct-io.c	dio: Remove code handling bio_alloc failure with __GFP_WAIT	2009-04-15 12:10:13 +02:00
drop_caches.c	vfs: skip I_CLEAR state inodes	2009-04-02 19:04:48 -07:00
eventfd.c	epoll keyed wakeups: make eventfd use keyed wakeups	2009-04-01 08:59:20 -07:00
eventpoll.c	epoll keyed wakeups: teach epoll about hints coming with the wakeup key	2009-04-01 08:59:20 -07:00
exec.c	alpha: binfmt_aout fix	2009-05-02 15:36:10 -07:00
fcntl.c	Fix a lockdep warning in fasync_helper()	2009-03-30 08:00:24 -06:00
fifo.c
file_table.c	trivial: remove unused variable 'path' in alloc_file()	2009-03-30 15:22:03 +02:00
file.c
filesystems.c	fs: Mark get_filesystem_list() as __init function.	2009-04-20 23:02:52 -04:00
fs_struct.c	Get rid of indirect include of fs_struct.h	2009-03-31 23:00:27 -04:00
fs-writeback.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2009-04-03 15:24:35 -07:00
generic_acl.c	New helper - current_umask()	2009-03-31 23:00:26 -04:00
inode.c	splice: add helpers for locking pipe inode	2009-04-15 12:10:12 +02:00
internal.h	New locking/refcounting for fs_struct	2009-03-31 23:00:26 -04:00
ioctl.c	Rationalize fasync return values	2009-03-16 08:34:35 -06:00
ioprio.c
Kconfig	nilfs2: update makefile and Kconfig	2009-04-07 08:31:16 -07:00
Kconfig.binfmt
libfs.c	kmemtrace, fs: uninline simple_transaction_set()	2009-04-03 12:09:09 +02:00
locks.c
Makefile	nilfs2: update makefile and Kconfig	2009-04-07 08:31:16 -07:00
mbcache.c
mpage.c	Remove two unneeded exports and make two symbols static in fs/mpage.c	2009-04-01 07:38:54 -04:00
namei.c	Fix i_mutex vs. readdir handling in nfsd	2009-04-20 23:01:16 -04:00
namespace.c	Touch all affected namespaces on propagation of mount	2009-04-20 23:01:15 -04:00
nfsctl.c
no-block.c
open.c	Get rid of indirect include of fs_struct.h	2009-03-31 23:00:27 -04:00
pipe.c	splice: add helpers for locking pipe inode	2009-04-15 12:10:12 +02:00
pnode.c
pnode.h
posix_acl.c
read_write.c	Make non-compat preadv/pwritev use native register size	2009-04-04 14:20:34 -07:00
read_write.h
readdir.c
select.c
seq_file.c	cpumask: fix seq_bitmap_*() functions.	2009-03-30 22:05:11 +10:30
signalfd.c
splice.c	splice: fix new kernel-doc warnings	2009-04-17 07:38:07 -07:00
stack.c
stat.c	kill vfs_stat_fd / vfs_lstat_fd	2009-04-20 23:02:52 -04:00
super.c	namespaces: move proc_net_get_sb to a generic fs/super.c helper	2009-04-07 08:31:09 -07:00
sync.c	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-quota-2.6	2009-03-27 14:48:34 -07:00
timerfd.c	timerfd: add flags check	2009-02-18 15:37:53 -08:00
utimes.c
xattr_acl.c
xattr.c	xattr: use memdup_user()	2009-04-20 23:02:50 -04:00