Skip to content

GitLab

Switch branch/tag
  1. 08 May, 2007 1 commit
    • Kees Cook's avatar
      proc: maps protection · 5096add8
      Kees Cook authored 
      The /proc/pid/ "maps", "smaps", and "numa_maps" files contain sensitive
information about the memory location and usage of processes.  Issues:

- maps should not be world-readable, especially if programs expect any
  kind of ASLR protection from local attackers.
- maps cannot just be 0400 because "-D_FORTIFY_SOURCE=2 -O2" makes glibc
  check the maps when %n is in a *printf call, and a setuid(getuid())
  process wouldn't be able to read its own maps file.  (For reference
  see http://lkml.org/lkml/2006/1/22/150

)
- a system-wide toggle is needed to allow prior behavior in the case of
  non-root applications that depend on access to the maps contents.

This change implements a check using "ptrace_may_attach" before allowing
access to read the maps contents.  To control this protection, the new knob
/proc/sys/kernel/maps_protect has been added, with corresponding updates to
the procfs documentation.

[akpm@linux-foundation.org: build fixes]
[akpm@linux-foundation.org: New sysctl numbers are old hat]
Signed-off-by: default avatarKees Cook <kees@outflux.net>
Cc: Arjan van de Ven <arjan@infradead.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      5096add8
  3. 02 May, 2007 1 commit
  5. 27 Apr, 2007 1 commit
  7. 26 Apr, 2007 2 commits
  9. 26 Feb, 2007 1 commit
  11. 11 Feb, 2007 1 commit
    • Miguel Ojeda Sandonis's avatar
      [PATCH] drivers: add LCD support · 70e84049
      Miguel Ojeda Sandonis authored 
      
Add support for auxiliary displays, the ks0108 LCD controller, the
cfag12864b LCD and adds a framebuffer device: cfag12864bfb.

- Add a "auxdisplay/" folder in "drivers/" for auxiliary display
  drivers.

- Add support for the ks0108 LCD Controller as a device driver.  (uses
  parport interface)

- Add support for the cfag12864b LCD as a device driver.  (uses ks0108
  LCD Controller driver)

- Add a framebuffer device called cfag12864bfb.  (uses cfag12864b LCD
  driver)

- Add the usual Documentation, includes, Makefiles, Kconfigs,
  MAINTAINERS, CREDITS...

- Miguel Ojeda will maintain all the stuff above.

[rdunlap@xenotime.net: workqueue fixups]
[akpm@osdl.org: kconfig fix]
Signed-off-by: default avatarMiguel Ojeda Sandonis <maxextreme@gmail.com>
Cc: Greg KH <greg@kroah.com>
Acked-by: default avatarPaulo Marques <pmarques@grupopie.com>
Cc: "Randy.Dunlap" <rdunlap@xenotime.net>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      70e84049
  13. 23 Jan, 2007 1 commit
  15. 30 Dec, 2006 1 commit
  17. 08 Dec, 2006 1 commit
  19. 03 Dec, 2006 1 commit
  21. 18 Nov, 2006 1 commit
  23. 09 Nov, 2006 1 commit
  25. 04 Oct, 2006 1 commit
  27. 03 Oct, 2006 3 commits
  29. 29 Sep, 2006 2 commits
  31. 22 Sep, 2006 1 commit
    • Paul Moore's avatar
      [NetLabel]: documentation · 8802f616
      Paul Moore authored 
      
Documentation for the NetLabel system, this includes a basic overview
of how NetLabel works, how LSM developers can integrate it into their
favorite LSM, as well as documentation on the CIPSO related sysctl
variables.  Also, due to the difficulty of finding expired IETF
drafts, I am including the IETF CIPSO draft that is the basis of the
NetLabel CIPSO implementation.
Signed-off-by: default avatarPaul Moore <paul.moore@hp.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      8802f616
  33. 27 Aug, 2006 1 commit
  35. 10 Jul, 2006 1 commit
  37. 27 Jun, 2006 1 commit
  39. 26 Jun, 2006 1 commit
  41. 25 Jun, 2006 1 commit
  43. 15 May, 2006 1 commit
  45. 04 May, 2006 1 commit
  47. 28 Apr, 2006 1 commit
  49. 11 Apr, 2006 1 commit
  51. 28 Mar, 2006 1 commit
  53. 27 Mar, 2006 1 commit
  55. 25 Mar, 2006 1 commit
  57. 20 Mar, 2006 2 commits
  59. 11 Mar, 2006 1 commit
  61. 05 Feb, 2006 1 commit
  63. 09 Jan, 2006 1 commit
  65. 03 Jan, 2006 1 commit
  67. 18 Nov, 2005 1 commit
  69. 14 Nov, 2005 1 commit