diff options
author | 2020-04-19 16:10:53 +0200 | |
---|---|---|
committer | 2020-04-22 10:51:21 -0500 | |
commit | 24a71ce5c47f6b1b3cdacf544cb24220f5c3b7ef (patch) | |
tree | da93b7bfc767c3fad21663b6c1aab72e2e9ffec8 /include/linux/proc_fs.h | |
parent | proc: allow to mount many instances of proc in one pid namespace (diff) | |
download | linux-24a71ce5c47f6b1b3cdacf544cb24220f5c3b7ef.tar.gz linux-24a71ce5c47f6b1b3cdacf544cb24220f5c3b7ef.tar.bz2 linux-24a71ce5c47f6b1b3cdacf544cb24220f5c3b7ef.zip |
proc: instantiate only pids that we can ptrace on 'hidepid=4' mount option
If "hidepid=4" mount option is set then do not instantiate pids that
we can not ptrace. "hidepid=4" means that procfs should only contain
pids that the caller can ptrace.
Signed-off-by: Djalal Harouni <tixxdz@gmail.com>
Signed-off-by: Alexey Gladkov <gladkov.alexey@gmail.com>
Reviewed-by: Alexey Dobriyan <adobriyan@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'include/linux/proc_fs.h')
-rw-r--r-- | include/linux/proc_fs.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/proc_fs.h b/include/linux/proc_fs.h index 1b98a41fdd8a..5bdc117ae947 100644 --- a/include/linux/proc_fs.h +++ b/include/linux/proc_fs.h @@ -47,6 +47,7 @@ enum { HIDEPID_OFF = 0, HIDEPID_NO_ACCESS = 1, HIDEPID_INVISIBLE = 2, + HIDEPID_NOT_PTRACEABLE = 4, /* Limit pids to only ptraceable pids */ }; struct proc_fs_info { |