| #
0f41c159 |
| 25-Aug-2020 |
christos <christos@NetBSD.org> |
RR/54971: scole_mail: sockstat command output incorrect for normal user As the PR hints, it is not enough to have kern.expose_address=1 to see kernel addresses, we also need to have the PK_KMEM bit s
RR/54971: scole_mail: sockstat command output incorrect for normal user As the PR hints, it is not enough to have kern.expose_address=1 to see kernel addresses, we also need to have the PK_KMEM bit set which we achieve by installing sockstat setgid kmem and opening and closing /dev/mem. (/usr/src/sys/kern/kern_proc.c:311). It is unfortunate that we need to give the program more privilege, to prove to the kernel that we have the privilege to see the data.
show more ...
|