grsecurity && capsel
Posted: Mon Apr 08, 2002 12:26 pm
Hi
I found situation which I cannot solve by myself. I've used capsel security module (see cliph.linux.pl). This module provides security mechanisms based on capabilities, it DOES NOT modify any proc regarding functions. Compiling kernel eg 2.4.18 with grsecurity with or without grsecurity then insmod'ing capsel cause all files in /proc become root:root it brokes all functionality of /proc filesystem restricting user access to his file descriptors ...
I've contacted capsel developer , now I'm asking You for help.
Greetings
xian
I found situation which I cannot solve by myself. I've used capsel security module (see cliph.linux.pl). This module provides security mechanisms based on capabilities, it DOES NOT modify any proc regarding functions. Compiling kernel eg 2.4.18 with grsecurity with or without grsecurity then insmod'ing capsel cause all files in /proc become root:root it brokes all functionality of /proc filesystem restricting user access to his file descriptors ...
I've contacted capsel developer , now I'm asking You for help.
Greetings
xian