Subject: Re: kern.showallprocs implementation
To: Rui Paulo <alpha1@freeshell.org>
From: Sean Davis <erplefoo@gmail.com>
List: tech-security
Date: 06/25/2004 21:02:02
On Sat, 26 Jun 2004 01:56:59 +0100, Rui Paulo <alpha1@freeshell.org> wrote:
> 
> Greetings.
> 
> I've implemented FreeBSD's kern.ps_showallprocs but I renamed the sysctl
> variable to kern.showallprocs. If this variable is equal to 0, normal
> users (i.e. not root) will only be able to list processes that match
> their UID, if its equal to one, no restriction of this type will be
> applied.
> The diff is in attachment, although I'm not really sure if `cvs diff` is the
> best way to submit diff's to the mailing list.
> What do you guys think ? Is it ok ?
> 
> Regards,
>     Rui Paulo
> 
> --
>   "Simplicity is the ultimate
>     sophistication."
>     -- Leonardo da Vinci
> 
> 
> 
> 
> diff - 1K Download 
> 

I haven't tried it yet - but I assume this affects the KINFO_PROC /
KINFO_PROC2 sysctls (it seems way higher up than either of those, so I
think it does...)

if so, I think it's good. I've wanted this in NetBSD for a while -
never got around to coding it ;)


-- 
Sean