Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I noticed that in my lenny distributions of debian that the proc files are read all in that any user can see if a process is running. In squeeze I noticed that the proc files are readable just to that user.

For example the root processes are not visible to users in squeeze but they are in lenny. I didn't setup our lenny servers but is there something that was done that caused lenny (either by me predicessor or something actually different in the distribution) to make the procs visible to all?

Note: I took a look at the fstab and they are the same for proc in squeeze and lenny.

share|improve this question
    
It makes a lot of sense not to let just anybody find out what some other user's processes are up to... –  vonbrand Apr 11 '13 at 17:22
    
true but unhelpful –  user162754 Apr 14 '13 at 21:52

1 Answer 1

up vote 1 down vote accepted

So the real answer is this:

The servers that where on squeeze where by a different provider then the lenny ones. As I found out the squeeze ones where compiled with a kernel that included the grsecurity patch which restricts access to /proc to just the that user's processes.

You can add grsecurity as a patch to other linux distributions following this instruciton guide: http://en.wikibooks.org/wiki/Grsecurity

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.