allow special gid viewing /proc
Posted: Wed Apr 28, 2004 5:08 pm
I dont know where is the problem... kernel 2.6.5 + grsec-2.0-2.6.5 on PLD Linux
there is special group with id 501
from
/proc/config.gz
---------------------------
[..]
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
CONFIG_GRKERNSEC_PROC_USER=y
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=501
CONFIG_GRKERNSEC_PROC_ADD=y
[..]
---------------------------
also:
$ cat /etc/group |grep 501
proces:x:501:auth,tada
and... user tada can't see not own processes...
why?
im using grsec for 2.4.26 machine... all is working fine...
please help, what i should to check.
there is special group with id 501
from
/proc/config.gz
---------------------------
[..]
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
CONFIG_GRKERNSEC_PROC_USER=y
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=501
CONFIG_GRKERNSEC_PROC_ADD=y
[..]
---------------------------
also:
$ cat /etc/group |grep 501
proces:x:501:auth,tada
and... user tada can't see not own processes...
why?
im using grsec for 2.4.26 machine... all is working fine...
please help, what i should to check.