Re: [PATCH] proc: add SecBits field to /proc/<PID>/status

From: Serge E. Hallyn
Date: Fri Feb 04 2022 - 22:14:17 EST


On Fri, Feb 04, 2022 at 04:32:00AM +1100, James Morris wrote:
> On Sun, 30 Jan 2022, Andrew G. Morgan wrote:
>
> > Securebits strongly influence the way Capabilities work for a process,
> > make them visible in the proc status files.
>
> My concern is that this might break some existing userspace code which
> parses the status file.

I don't think anyone should be using that file expecting the fields
in a certain order. No 'grep "^VmRSS:" /proc/self/status' type of
use is going to be broken by this patch. Do you have something else
in mind?

-serge