[grsec] access restriction for netlink?

Carlos Carvalho carlos at fisica.ufpr.br
Sun Jun 29 21:01:09 EDT 2008


Is there a way to restrict access to netlink sockets in grsec/pax? I'm
interested in CONFIG_TASKSTATS and the other sub-options that need it.
It seems that even with grsec any user will have access to this info
for all processes and not only the ones he created. Is this correct?


More information about the grsecurity mailing list