Re: [PATCH] fs/proc: Add process text segment md5-summing

[Arvid Brodin]

On 2012-11-13 03:16, Eric W. Biederman wrote:
> To add another nail in the coffin.
> 
> You can do this with ptrace or with /proc/<pid>/mem without a kernel
> patch.
> 
> To make this safe would need a ptrace_may_acces(PTRACE_MODE_READ)
> permission check.  At which point not doing this with ptrace just adds
> up to extra kernel maintenance for no real point.

If my client still wants to run text segment checks, even after the
criticism of the idea behind the patch, the above should prove very
handy. Thanks!


-- 
Arvid Brodin | Consultant (Linux)
XDIN AB | KnarrarnÃsgatan 7 | SE-164 40 Kista | Sweden | xdin.comèº{.nÇ+‰·Ÿ®‰­†+%ŠËlzwm…ébëæìr¸›zX§»®w¥Š{ayºÊÚë,j­¢f£¢·hš‹àz¹®w¥¢¸¢·¦j:+v‰¨ŠwèjØm¶Ÿÿ¾«‘êçzZ+ƒùšŽŠÝj"ú!¶iO•æ¬z·švØ^¶m§ÿðÃnÆàþY&—