diff options
| author | Lukas Pirl <github@lukas-pirl.de> | 2016-07-11 11:11:18 +0300 |
|---|---|---|
| committer | Michael Boelen <michael@cisofy.com> | 2016-07-11 11:11:18 +0300 |
| commit | 77634d578cb75dec1a8260ac896a156fd3555553 (patch) | |
| tree | d6077ed8265b7bca91fbd96625486ce51469f32d /debian | |
| parent | 74c9513fbb58e0769595ccbdf35f4a7a62f1ca87 (diff) | |
expect value of sysctl:kernel.kptr_restrict to be 2 (#224)
from https://lwn.net/Articles/420403/:
"""
The %pK format specifier is designed to hide exposed kernel
pointers, specifically via /proc interfaces. Exposing these
pointers provides an easy target for kernel write vulnerabilities,
since they reveal the locations of writable structures containing
easily triggerable function pointers. The behavior of %pK depends
on the kptr_restrict sysctl. […] If kptr_restrict is set to 2,
kernel pointers using %pK are printed as 0's regardless of
privileges.
"""
Diffstat (limited to 'debian')
0 files changed, 0 insertions, 0 deletions