Kirill A. Shutemov ab676b7d6f pagemap: do not leak physical addresses to non-privileged userspace ... As pointed by recent post[1] on exploiting DRAM physical imperfection, /proc/PID/pagemap exposes sensitive information which can be used to do attacks. This disallows anybody without CAP_SYS_ADMIN to read the pagemap. [1] http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html [ Eventually we might want to do anything more finegrained, but for now this is the simple model. - Linus ] Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Acked-by: Konstantin Khlebnikov <khlebnikov@openvz.org> Acked-by: Andy Lutomirski <luto@amacapital.net> Cc: Pavel Emelyanov <xemul@parallels.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Mark Seaborn <mseaborn@chromium.org> Cc: stable@vger.kernel.org Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2015-03-17 09:31:30 -07:00
..
array.c	proc: use %*pb[l] to print bitmaps including cpumasks and nodemasks	2015-02-13 21:21:38 -08:00
base.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2014-12-17 12:31:40 -08:00
cmdline.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
consoles.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
cpuinfo.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
devices.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
fd.c	fs: Convert show_fdinfo functions to void	2014-11-05 14:13:23 -05:00
fd.h	proc: Move proc_fd() to fs/proc/fd.h	2013-05-01 17:29:39 -04:00
generic.c	procfs: fix race between symlink removals and traversals	2015-02-22 11:43:12 -05:00
inode.c	procfs: fix race between symlink removals and traversals	2015-02-22 11:43:12 -05:00
internal.h	procfs: fix race between symlink removals and traversals	2015-02-22 11:43:12 -05:00
interrupts.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
Kconfig	kcore: add Kconfig help text	2013-11-13 12:09:33 +09:00
kcore.c	fs/proc/kcore.c: don't add modules range to kcore if it's equal to vmcore range	2014-10-09 22:25:50 -04:00
kmsg.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
loadavg.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
Makefile	proc: Implement /proc/thread-self to point at the directory of the current thread	2014-08-04 10:07:11 -07:00
meminfo.c	fs/proc/meminfo.c: include cma info in proc/meminfo	2014-12-18 19:08:10 -08:00
namespaces.c	kill proc_ns completely	2014-12-10 21:30:57 -05:00
nommu.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
page.c	mm:add KPF_ZERO_PAGE flag for /proc/kpageflags	2015-02-11 17:06:00 -08:00
proc_net.c	fs/proc: use a rb tree for the directory entries	2014-12-10 17:41:09 -08:00
proc_sysctl.c	sysctl: remove typedef ctl_table	2014-08-08 15:57:24 -07:00
proc_tty.c	proc: remove proc_tty_ldisc variable	2014-08-08 15:57:22 -07:00
root.c	fs/proc: use a rb tree for the directory entries	2014-12-10 17:41:09 -08:00
self.c	new helper: readlink_copy()	2014-04-01 23:19:15 -04:00
softirqs.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
stat.c	genirq: Prevent proc race against freeing of irq descriptors	2014-12-13 13:33:07 +01:00
task_mmu.c	pagemap: do not leak physical addresses to non-privileged userspace	2015-03-17 09:31:30 -07:00
task_nommu.c	proc/maps: make vm_is_stack() logic namespace-friendly	2014-10-09 22:25:50 -04:00
thread_self.c	proc: Implement /proc/thread-self to point at the directory of the current thread	2014-08-04 10:07:11 -07:00
uptime.c	cputime: Default implementation of nsecs -> cputime conversion	2014-03-13 15:56:43 +01:00
version.c	fs/proc: don't use module_init for non-modular core code	2014-01-23 16:37:02 -08:00
vmcore.c	vmcore: fix PT_NOTE n_namesz, n_descsz overflow issue	2015-02-17 14:34:52 -08:00