Message ID | 1428447093-3282-132-git-send-email-kamal@canonical.com |
---|---|
State | New |
Headers | show |
diff --git a/fs/proc/task_mmu.c b/fs/proc/task_mmu.c index 903c19f..b5f508d 100644 --- a/fs/proc/task_mmu.c +++ b/fs/proc/task_mmu.c @@ -1249,6 +1249,9 @@ out: static int pagemap_open(struct inode *inode, struct file *file) { + /* do not disclose physical addresses: attack vector */ + if (!capable(CAP_SYS_ADMIN)) + return -EPERM; pr_warn_once("Bits 55-60 of /proc/PID/pagemap entries are about " "to stop being page-shift some time soon. See the " "linux/Documentation/vm/pagemap.txt for details.\n");