Vasiliy Kulikov 658a3f90a8 proc: restrict access to /proc/PID/io ... [ upstream commit 1d1221f375 ] /proc/PID/io may be used for gathering private information. E.g. for openssh and vsftpd daemons wchars/rchars may be used to learn the precise password length. Restrict it to processes being able to ptrace the target process. ptrace_may_access() is needed to prevent keeping open file descriptor of "io" file, executing setuid binary and gathering io information of the setuid'ed process. Said to be CVE-2011-2495 Signed-off-by: Vasiliy Kulikov <segoon@openwall.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Andi Kleen <ak@linux.intel.com>		2011-08-01 13:54:59 -07:00
..
9p	9p: Pass the correct end of buffer to p9stat_read	2010-07-27 14:52:04 -05:00
adfs	kill spurious reference to vmtruncate	2010-05-27 22:15:42 -04:00
affs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
afs	writeback: remove writeback_inodes_wbc	2010-07-06 08:54:03 +02:00
autofs	fs/: do not fallback to default_llseek() when readdir() uses BKL	2010-05-27 09:12:56 -07:00
autofs4	fs/autofs4: use memdup_user	2010-05-27 09:12:41 -07:00
befs	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
bfs	rename the generic fsync implementations	2010-05-27 22:06:06 -04:00
btrfs	btrfs: Require CAP_SYS_ADMIN for filesystem rebalance	2011-08-01 13:54:46 -07:00
cachefiles	CacheFiles: Fix error handling in cachefiles_determine_cache_security()	2010-05-12 18:23:58 -07:00
ceph	ceph: use complete_all and wake_up_all	2010-07-27 13:11:17 -07:00
cifs	cifs: add fallback in is_path_accessible for old servers	2011-08-01 13:54:48 -07:00
coda	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
configfs	fix setattr error handling in sysfs, configfs	2010-06-04 17:16:29 -04:00
cramfs
debugfs	Add x64 support to debugfs	2010-05-19 22:41:57 -04:00
devpts	Simplify devpts_get_sb() failure exits	2010-05-21 18:31:12 -04:00
dlm	dlm: fix ast ordering for user locks	2010-04-30 14:52:51 -05:00
ecryptfs	eCryptfs: Allow 2 scatterlist entries for encrypted filenames	2011-08-01 13:54:53 -07:00
efs
exofs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
exportfs
ext2	ext2: Fix link count corruption under heavy link+rename load	2011-03-31 11:58:16 -07:00
ext3	ext3: Fix fs corruption when make_indexed_dir() fails	2011-08-01 13:54:50 -07:00
ext4	ext4: release page cache in ext4_mb_load_buddy error path	2011-08-01 13:54:50 -07:00
fat	fat: Fix corrupt inode flags when remove ATTR_SYS flag	2011-08-01 13:54:55 -07:00
freevxfs	fs/: do not fallback to default_llseek() when readdir() uses BKL	2010-05-27 09:12:56 -07:00
fscache	FS-Cache: Remove unneeded null checks	2010-06-01 13:32:11 -07:00
fuse	fuse: fix hang of single threaded fuseblk filesystem	2011-03-31 11:58:16 -07:00
gfs2	GFS2: gfs2_logd should be using interruptible waits	2010-09-26 17:18:31 -07:00
hfs	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
hfsplus	hfsplus: Push down BKL into ioctl function	2010-05-17 05:27:03 +02:00
hostfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
hpfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
hppfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
hugetlbfs	rename the generic fsync implementations	2010-05-27 22:06:06 -04:00
isofs	fs/: do not fallback to default_llseek() when readdir() uses BKL	2010-05-27 09:12:56 -07:00
jbd	jbd: fix fsync() tid wraparound bug	2011-08-01 13:54:50 -07:00
jbd2	jbd2/ocfs2: Fix block checksumming when a buffer is used in several transactions	2010-07-15 15:17:47 -07:00
jffs2	Fix up trivial spelling errors ('taht' -> 'that')	2010-07-21 09:25:42 -07:00
jfs	jfs: don't allow os2 xattr namespace overlap with others	2010-08-13 13:31:06 -07:00
lockd	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
logfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
minix	minix: fix regression in minix_mkdir()	2010-09-20 13:36:37 -07:00
ncpfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
nfs	nfs: fix compilation warning	2011-08-01 13:54:44 -07:00
nfs_common	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
nfsd	Open with O_CREAT flag set fails to open existing files on non writable directories	2011-08-01 13:54:43 -07:00
nilfs2	mm: prevent concurrent unmap_mapping_range() on the same inode	2011-08-01 13:54:59 -07:00
nls
notify	inotify: stop kernel memory leak on file creation failure	2011-02-06 11:03:41 -08:00
ntfs	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
ocfs2	Treat writes as new when holes span across page boundaries	2011-04-28 08:20:56 -07:00
omfs	rename the generic fsync implementations	2010-05-27 22:06:06 -04:00
openpromfs
partitions	Fix for buffer overflow in ldm_frag_add not sufficient	2011-08-01 13:54:51 -07:00
proc	proc: restrict access to /proc/PID/io	2011-08-01 13:54:59 -07:00
qnx4	rename the generic fsync implementations	2010-05-27 22:06:06 -04:00
quota	quota: Don't write quota info in dquot_commit()	2011-04-28 08:20:53 -07:00
ramfs	ramfs: fix memleak on no-mmu arch	2011-04-28 08:21:04 -07:00
reiserfs	reiserfs: don't acquire lock recursively in reiserfs_acl_chmod	2010-12-14 23:40:04 +01:00
romfs
smbfs	kill spurious reference to vmtruncate	2010-05-27 22:15:42 -04:00
squashfs	Squashfs: handle corruption of directory structure	2011-04-28 08:21:00 -07:00
sysfs	sysfs: checking for NULL instead of ERR_PTR	2010-09-20 13:36:29 -07:00
sysv	sysvfs: fix NULL deref. when allocating new inode	2010-06-29 15:29:32 -07:00
ubifs	UBIFS: fix memory leak on error path	2011-08-01 13:54:54 -07:00
udf	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs-2.6	2010-05-30 09:11:11 -07:00
ufs	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs-2.6	2010-05-30 09:11:11 -07:00
xfs	xfs: zero proper structure size for geometry calls	2011-04-28 08:21:02 -07:00
aio.c	aio: wake all waiters when destroying ctx	2011-03-31 11:58:43 -07:00
anon_inodes.c	Revert "anon_inode: set S_IFREG on the anon_inode"	2010-05-27 22:03:05 -04:00
attr.c	fs: introduce new truncate sequence	2010-05-27 22:15:33 -04:00
bad_inode.c	drop unused dentry argument to ->fsync	2010-05-27 22:05:02 -04:00
binfmt_aout.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
binfmt_elf_fdpic.c	binfmt_elf_fdpic: Fix clear_user() error handling	2010-06-01 08:11:06 -07:00
binfmt_elf.c	coredump: pass mm->flags as a coredump parameter for consistency	2010-03-06 11:26:46 -08:00
binfmt_em86.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
binfmt_flat.c	flat: tweak default stack alignment	2010-06-29 15:29:31 -07:00
binfmt_misc.c	binfmt_misc: fix binfmt_misc priority	2010-09-20 13:36:39 -07:00
binfmt_script.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
binfmt_som.c
bio-integrity.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
bio.c	bio: take care not overflow page count when mapping/copying user data	2010-12-14 23:40:11 +01:00
block_dev.c	blkdev: cgroup whitelist permission fix	2010-08-13 13:30:51 -07:00
buffer.c	fs: introduce new truncate sequence	2010-05-27 22:15:33 -04:00
char_dev.c	char: Mark /dev/zero and /dev/kmem as not capable of writeback	2010-09-26 17:18:24 -07:00
compat_binfmt_elf.c	elf coredump: replace ELF_CORE_EXTRA_* macros by functions	2010-03-06 11:26:45 -08:00
compat_ioctl.c	pktcdvd: improve BKL and compat_ioctl.c usage	2010-04-29 08:44:37 -07:00
compat.c	exec: copy-and-paste the fixes into compat_do_execve() paths	2010-12-14 23:40:11 +01:00
dcache.c	fs: call security_d_instantiate in d_obtain_alias V2	2011-03-31 11:58:48 -07:00
dcookies.c	oprofile, dcookies: Fix possible circular locking dependency	2011-08-01 13:54:56 -07:00
direct-io.c	O_DIRECT: fix the splitting up of contiguous I/O	2010-09-20 13:36:33 -07:00
drop_caches.c	new helper: iterate_supers()	2010-05-21 18:31:16 -04:00
eventfd.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
eventpoll.c	epoll: prevent creating circular epoll structures	2011-03-31 11:58:13 -07:00
exec.c	exec: delay address limit change until point of no return	2011-08-01 13:54:56 -07:00
fcntl.c	fs/fcntl.c:kill_fasync_rcu() fa_lock must be IRQ-safe	2010-06-29 15:29:32 -07:00
fifo.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
file_table.c	CRED: Fix kernel panic upon security_file_alloc() failure.	2011-03-31 11:58:05 -07:00
file.c	fs: use rlimit helpers	2010-03-06 11:26:29 -08:00
filesystems.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
fs_struct.c
fs-writeback.c	writeback: simplify the write back thread queue	2010-07-06 08:59:53 +02:00
generic_acl.c	fs: xattr_handler table should be const	2010-05-21 18:31:18 -04:00
inode.c	mm: prevent concurrent unmap_mapping_range() on the same inode	2011-08-01 13:54:59 -07:00
internal.h	Bury __put_super_and_need_restart()	2010-05-21 18:31:16 -04:00
ioctl.c	Introduce freeze_super and thaw_super for the fsfreeze ioctl	2010-05-21 18:31:18 -04:00
ioprio.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
Kconfig	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2010-03-19 09:43:06 -07:00
Kconfig.binfmt
libfs.c	wrong type for 'magic' argument in simple_fill_super()	2010-06-04 17:16:28 -04:00
locks.c	Merge branch 'for-next' into for-linus	2010-03-08 16:55:37 +01:00
Makefile	Take statfs variants to fs/statfs.c	2010-05-21 18:31:17 -04:00
mbcache.c	mm: add context argument to shrinker callback	2010-07-19 14:56:17 +10:00
mpage.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
namei.c	VFS: fix recent breakage of FS_REVAL_DOT	2010-05-27 22:03:06 -04:00
namespace.c	Fix sget() race with failing mount	2010-08-13 13:30:50 -07:00
nfsctl.c	Switch may_open() and break_lease() to passing O_...	2010-03-03 13:00:21 -05:00
no-block.c
open.c	Take statfs variants to fs/statfs.c	2010-05-21 18:31:17 -04:00
pipe.c	Un-inline get_pipe_info() helper function	2010-12-14 23:40:18 +01:00
pnode.c	Kill CL_PROPAGATION, sanitize fs/pnode.c:get_source()	2010-03-03 13:00:22 -05:00
pnode.h	VFS: Clean up shared mount flag propagation	2010-03-03 14:07:55 -05:00
posix_acl.c
read_write.c	vfs: introduce noop_llseek()	2010-05-27 09:12:56 -07:00
read_write.h
readdir.c
select.c	Add generic sys_old_select()	2010-03-12 15:52:32 -08:00
seq_file.c	seq_file: fix new kernel-doc warnings	2010-03-07 15:48:26 -08:00
signalfd.c	signalfd: fill in ssi_int for posix timers and message queues	2010-08-13 13:30:53 -07:00
splice.c	Export 'get_pipe_info()' to other users	2010-12-14 23:40:18 +01:00
stack.c
stat.c
statfs.c	Take statfs variants to fs/statfs.c	2010-05-21 18:31:17 -04:00
super.c	Fix sget() race with failing mount	2010-08-13 13:30:50 -07:00
sync.c	Merge branch 'master' into for-linus	2010-06-01 12:42:12 +02:00
timerfd.c	fs/timerfd.c: make use of wait_event_interruptible_locked_irq()	2010-05-20 13:21:42 -07:00
utimes.c
xattr_acl.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
xattr.c	fs: xattr_handler table should be const	2010-05-21 18:31:18 -04:00