Subject: SECURITY: procfs fix
To: None <tech-security@NetBSD.ORG>
From: matthew green <mrg@splode.eterna.com.au>
List: tech-security
Date: 04/28/1997 22:00:49
today, charles hannum checked in a fix to our procfs code that disallows
tracing of init via procfs, while in securemode (securelevel > -1).  the
problem is that someone could attach to init, and get init to lower the
securelevel of the system, thus removing the entire purpose of securelevel.
using ptrace(2) and PT_ATTACH already performed the correct check.

this is only a problem to people who:
	(a) use securelevel the way it was intended
	(b) also use procfs

it's also only applicable to people who can become root.


.mrg.