Date: Sun, 25 Jul 1999 22:44:49 -0700 (PDT) From: <jkoshy@FreeBSD.org> To: hackers@FreeBSD.ORG Cc: sef@freebsd.org, jkoshy@FreeBSD.org Subject: Re: deny ktrace without read permissions? Message-ID: <199907260544.WAA13646@freefall.freebsd.org> In-Reply-To: Your message of "Sun, 25 Jul 1999 22:13:33 MST." <199907260513.WAA08897@kithrup.com>
next in thread | previous in thread | raw e-mail | index | archive | help
jk> Yes, but /if/ KTRACE is present, today's code allows you to bypass jk>the lack of read permissions on an executable. That shouldn't be jk>allowed. The current behaviour could be regarded as a security jk>hole actually :). sef> No more so than core dumps do. Yes, but an application can protect itself from an inadvertent core dump. It can't (today) against being ktrace'd. sef> I vote strongly against this change. Noted, thanks. I will summarize the result of the discussion in a followup to kern/3546. Regards, Koshy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199907260544.WAA13646>