Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 May 1998 07:25:49 -0700
From:      David Greenman <dg@root.com>
To:        Greg Lehey <grog@lemis.com>
Cc:        Tor Egge <tegge@FreeBSD.ORG>, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
Subject:   Re: cvs commit: src/sys/i386/i386 machdep.c vm_machdep.c src/sys/i386/include ptrace.h src/sys/kern sys_process.c src/sys/miscfs/procfs procfs.h procfs_mem.c procfs_vnops.c 
Message-ID:  <199805191425.HAA21990@implode.root.com>
In-Reply-To: Your message of "Tue, 19 May 1998 11:17:05 %2B0930." <19980519111705.R427@freebie.lemis.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
>On Mon, 18 May 1998 at 17:00:15 -0700, Tor Egge wrote:
>> tegge       1998/05/18 17:00:15 PDT
>> 
>>   Modified files:
>>     sys/i386/i386        machdep.c vm_machdep.c 
>>     sys/i386/include     ptrace.h 
>>     sys/kern             sys_process.c 
>>     sys/miscfs/procfs    procfs.h procfs_mem.c procfs_vnops.c 
>>   Log:
>>   Disallow reading the current kernel stack. Only the user structure and
>>   the current registers should be accessible.
>>   Reviewed by:	David Greenman <dg@root.com>
>
>What's the rationale for this?  How will it affect debuggers?

   Security - the kernel stack must not be accessible by the user process
since it might contain sensitive data. The above should not affect debuggers.

-DG

David Greenman
Co-founder/Principal Architect, The FreeBSD Project

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805191425.HAA21990>