changing rights in /proc/sys

Menestrel · 02-11-2006, 05:36 AM

how can I chmod /proc/sys/net/ipv4/ip_forward such that nobody but root can see what value it has ?
I tried chmod 640 /proc/sys/net/ipv4/ip_forward but when I do a ls /proc/sys/net/ipv4/ip_forward the rights remain the same.
can this be done some other way ?

Krugger · 02-11-2006, 07:26 AM

Maybe applying the grsecurity patch and then chosing the restrict permissions on /proc might work for you.

Menestrel · 02-12-2006, 04:57 AM

I am using Debian Stable and it seems that there is no valid grsecurity patch in the stable portage for kernel 2.4.27. Could you provide a link where can I find a grsecurity patch for kernel 2.427, googleing around didn't help ...

unSpawn · 02-13-2006, 05:44 AM

AFAIK the only distro on earth that deserves major credits for having a GRSecurity kernel on tap is Gentoo. For all others you'll have to roll your own.

Menestrel · 02-17-2006, 10:59 AM

The problem is I don't seem to find a valid grsecurity patch for kernel 2.4.27, could you post a link from where I can download this patch ?

unSpawn · 02-23-2006, 01:04 PM

http://grsecurity.net/grsecurity-2.0.1-2.4.27.patch