Eric Paris 69f594a389 ptrace: do not audit capability check when outputing /proc/pid/stat ... Reading /proc/pid/stat of another process checks if one has ptrace permissions on that process. If one does have permissions it outputs some data about the process which might have security and attack implications. If the current task does not have ptrace permissions the read still works, but those fields are filled with inocuous (0) values. Since this check and a subsequent denial is not a violation of the security policy we should not audit such denials. This can be quite useful to removing ptrace broadly across a system without flooding the logs when ps is run or something which harmlessly walks proc. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Serge E. Hallyn <serge.hallyn@canonical.com>		2012-01-05 18:53:00 -05:00
..
array.c	ptrace: do not audit capability check when outputing /proc/pid/stat	2012-01-05 18:53:00 -05:00
base.c	vfs: show O_CLOEXE bit properly in /proc/<pid>/fdinfo/<fd> files	2011-08-06 11:51:33 -07:00
cmdline.c
consoles.c
cpuinfo.c
devices.c
generic.c	proc: make struct proc_dir_entry::name a terminal array rather than a pointer	2011-07-27 12:50:45 -07:00
inode.c	procfs: return ENOENT on opening a being-removed proc entry	2011-07-26 16:49:43 -07:00
internal.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/linux-2.6-nsfd	2011-05-25 18:10:16 -07:00
interrupts.c
Kconfig
kcore.c
kmsg.c
loadavg.c
Makefile	ns: proc files for namespace naming policy.	2011-05-10 14:31:44 -07:00
meminfo.c	atomic: use <linux/atomic.h>	2011-07-26 16:49:47 -07:00
mmu.c
namespaces.c	proc: Fix Oops on stat of /proc/<zombie pid>/ns/net	2011-06-15 14:35:29 -07:00
nommu.c
page.c
proc_devtree.c
proc_net.c	proc: make struct proc_dir_entry::name a terminal array rather than a pointer	2011-07-27 12:50:45 -07:00
proc_sysctl.c	->permission() sanitizing: don't pass flags to ->permission()	2011-07-20 01:43:24 -04:00
proc_tty.c
root.c	proc: make struct proc_dir_entry::name a terminal array rather than a pointer	2011-07-27 12:50:45 -07:00
softirqs.c
stat.c	proc/stat: use defined macro KMALLOC_MAX_SIZE	2011-05-26 17:12:37 -07:00
task_mmu.c	teach /proc/$pid/numa_maps about transparent hugepages	2011-09-21 13:15:44 -07:00
task_nommu.c
uptime.c
version.c
vmcore.c	fs/proc/vmcore.c: add hook to read_from_oldmem() to check for non-ram pages	2011-05-26 17:12:37 -07:00