Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

From: Kees Cook
Date: Tue Mar 05 2024 - 05:13:40 EST


On Tue, Mar 05, 2024 at 10:58:25AM +0100, Christian Brauner wrote:
> Since the write handler for /proc/<pid>/mem does raise FOLL_FORCE
> unconditionally it likely would implicitly. But I'm not familiar enough
> with FOLL_FORCE to say for sure.

I should phrase the question better. :) Is the supervisor writing into
read-only regions of the child process?

--
Kees Cook