security-misc
security-misc copied to clipboard
`hide-hardware-info.service`: hide `/proc/dynamic_debug/`
This is a file I would normally expect to be restricted by kernel.dmesg_restrict = 1
yet I can still read it on my system. Leaks hardware info, kernel module info.
Permissions of this file /proc/dynamic_debug/control
are 644
.
See also: https://www.kernel.org/doc/html/v4.12/admin-guide/dynamic-debug-howto.html
Might get fixed if the following feature was implemented:
- https://github.com/Kicksecure/security-misc/issues/205