SecurityFocus

ps information leak in FreeBSD Jan 05 2003 08:46PM
Cache (cache sowatech com pl) (2 replies)

Re: ps information leak in FreeBSD Jan 07 2003 09:18AM
Jez Hancock (jez hancock munk nu) (2 replies)

Re: ps information leak in FreeBSD Jan 08 2003 04:39PM
Sean Kelly (smkelly zombie org)

Re: ps information leak in FreeBSD Jan 07 2003 05:48PM
Crist J. Clark (crist clark attbi com) (1 replies)

Re: ps information leak in FreeBSD Jan 09 2003 03:48AM
Damien Miller (djm mindrot org) (1 replies)

Re: ps information leak in FreeBSD Jan 09 2003 09:23PM
David M. Wilson (dw botanicus net)

Re: ps information leak in FreeBSD Jan 06 2003 09:19PM
Sean Kelly (smkelly zombie org)

On Sun, Jan 05, 2003 at 08:46:50PM +0000, Cache wrote:
> [cache@silent][ttyv1] ~> sysctl -a | grep show
> kern.ps_showallprocs: 0
> [cache@silent][ttyv1] ~> ps -auxwwwp 101
> USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
> root 101 0,0 0,2 1020 740 ?? Is 0:12 0:00,01 /usr/sbin/cron

I've been aware of this problem for a long time, and in fact I made a patch
against 4.6-STABLE which can be applied to correct it. I am not sure how
portable it will be to 4.7-STABLE, but I imagine it would work.

Please see the relevent FreeBSD PR:
http://www.FreeBSD.org/cgi/query-pr.cgi?pr=kern/42065

--
Sean Kelly | PGP KeyID: D2E5E296
smkelly (at) zombie (dot) org [email concealed] | http://www.zombie.org

[ reply ]