Kirill A. Shutemov ab676b7d6f pagemap: do not leak physical addresses to non-privileged userspace ...

As pointed by recent post[1] on exploiting DRAM physical imperfection,
/proc/PID/pagemap exposes sensitive information which can be used to do
attacks.

This disallows anybody without CAP_SYS_ADMIN to read the pagemap.

[1] http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html

[ Eventually we might want to do anything more finegrained, but for now
  this is the simple model.   - Linus ]

Signed-off-by: Kirill A. Shutemov <[email protected]>
Acked-by: Konstantin Khlebnikov <[email protected]>
Acked-by: Andy Lutomirski <[email protected]>
Cc: Pavel Emelyanov <[email protected]>
Cc: Andrew Morton <[email protected]>
Cc: Mark Seaborn <[email protected]>
Cc: [email protected]
Signed-off-by: Linus Torvalds <[email protected]>

2015-03-17 09:31:30 -07:00

..

array.c

proc: use %*pb[l] to print bitmaps including cpumasks and nodemasks

2015-02-13 21:21:38 -08:00

base.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2014-12-17 12:31:40 -08:00

cmdline.c

…

consoles.c

…

cpuinfo.c

…

devices.c

…

fd.c

fs: Convert show_fdinfo functions to void

2014-11-05 14:13:23 -05:00

fd.h

…

generic.c

procfs: fix race between symlink removals and traversals

2015-02-22 11:43:12 -05:00

inode.c

procfs: fix race between symlink removals and traversals

2015-02-22 11:43:12 -05:00

internal.h

procfs: fix race between symlink removals and traversals

2015-02-22 11:43:12 -05:00

interrupts.c

…

Kconfig

…

kcore.c

fs/proc/kcore.c: don't add modules range to kcore if it's equal to vmcore range

2014-10-09 22:25:50 -04:00

kmsg.c

…

loadavg.c

…

Makefile

proc: Implement /proc/thread-self to point at the directory of the current thread

2014-08-04 10:07:11 -07:00

meminfo.c

fs/proc/meminfo.c: include cma info in proc/meminfo

2014-12-18 19:08:10 -08:00

namespaces.c

kill proc_ns completely

2014-12-10 21:30:57 -05:00

nommu.c

…

page.c

mm:add KPF_ZERO_PAGE flag for /proc/kpageflags

2015-02-11 17:06:00 -08:00

proc_net.c

fs/proc: use a rb tree for the directory entries

2014-12-10 17:41:09 -08:00

proc_sysctl.c

sysctl: remove typedef ctl_table

2014-08-08 15:57:24 -07:00

proc_tty.c

proc: remove proc_tty_ldisc variable

2014-08-08 15:57:22 -07:00

root.c

fs/proc: use a rb tree for the directory entries

2014-12-10 17:41:09 -08:00

self.c

new helper: readlink_copy()

2014-04-01 23:19:15 -04:00

softirqs.c

…

stat.c

genirq: Prevent proc race against freeing of irq descriptors

2014-12-13 13:33:07 +01:00

task_mmu.c

pagemap: do not leak physical addresses to non-privileged userspace

2015-03-17 09:31:30 -07:00

task_nommu.c

proc/maps: make vm_is_stack() logic namespace-friendly

2014-10-09 22:25:50 -04:00

thread_self.c

proc: Implement /proc/thread-self to point at the directory of the current thread

2014-08-04 10:07:11 -07:00

uptime.c

…

version.c

…

vmcore.c

vmcore: fix PT_NOTE n_namesz, n_descsz overflow issue

2015-02-17 14:34:52 -08:00