[APPLIED Maverick] [PATCH 0/1] [Maverick, Lucid SRU] LP#568844 -- allow reading of /proc/mmap_min_addr

Leann Ogasawara leann.ogasawara at canonical.com
Tue May 4 18:07:54 UTC 2010


On Tue, 2010-05-04 at 17:45 +0100, Andy Whitcroft wrote:
> A number of applications need to be able read mmap_min_addr in order to
> determine where they should map segments.  The permissions on the proc file
> imply that read should be possible but read is prevented by capabilities.
> As it is possible for an attacker to determine the current setting by
> repeated attempts to map low pages pages there is no point protecting this
> information.
> 
> The following patch has been submitted upstream and in the security-testing
> tree.  Proposing this for Maverick and SRU to Lucid.

Applied to Maverick.

Ack'ing for Lucid:

Acked-by: Leann Ogasawara <leann.ogasawara at canonical.com>





More information about the kernel-team mailing list