[PATCH 0/2] fs: set root dir perms

Kees Cook kees.cook at canonical.com
Tue Feb 22 18:28:35 UTC 2011


With the continuing deluge of bugs in the "debug" filesystem, I would
like to make that filesystem's root directory mode 0700 by default since
it's filled with crazy stuff that regular users do not need to see.

Better to try to just close the door completely on all the stuff in there.
It is, after all, supposed to only be used for debugging, right?





More information about the kernel-team mailing list