Skip to content

Commit de33dde

Browse files
mhiramatZhengShunQian
authored andcommitted
kprobes: Make list and blacklist root user read only
commit f2a3ab3 upstream. Since the blacklist and list files on debugfs indicates a sensitive address information to reader, it should be restricted to the root user. Suggested-by: Thomas Richter <[email protected]> Suggested-by: Ingo Molnar <[email protected]> Signed-off-by: Masami Hiramatsu <[email protected]> Cc: Ananth N Mavinakayanahalli <[email protected]> Cc: Anil S Keshavamurthy <[email protected]> Cc: Arnd Bergmann <[email protected]> Cc: David Howells <[email protected]> Cc: David S . Miller <[email protected]> Cc: Heiko Carstens <[email protected]> Cc: Jon Medhurst <[email protected]> Cc: Linus Torvalds <[email protected]> Cc: Peter Zijlstra <[email protected]> Cc: Thomas Gleixner <[email protected]> Cc: Tobin C . Harding <[email protected]> Cc: Will Deacon <[email protected]> Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Link: https://lkml.kernel.org/lkml/152491890171.9916.5183693615601334087.stgit@devbox Signed-off-by: Ingo Molnar <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]>
1 parent b7d5dbe commit de33dde

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

kernel/kprobes.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2441,7 +2441,7 @@ static int __init debugfs_kprobe_init(void)
24412441
if (!dir)
24422442
return -ENOMEM;
24432443

2444-
file = debugfs_create_file("list", 0444, dir, NULL,
2444+
file = debugfs_create_file("list", 0400, dir, NULL,
24452445
&debugfs_kprobes_operations);
24462446
if (!file)
24472447
goto error;
@@ -2451,7 +2451,7 @@ static int __init debugfs_kprobe_init(void)
24512451
if (!file)
24522452
goto error;
24532453

2454-
file = debugfs_create_file("blacklist", 0444, dir, NULL,
2454+
file = debugfs_create_file("blacklist", 0400, dir, NULL,
24552455
&debugfs_kprobe_blacklist_ops);
24562456
if (!file)
24572457
goto error;

0 commit comments

Comments
 (0)