| View previous topic :: View next topic |
| Author |
Message |
Edaph
n00b
Joined: 15 Nov 2004
Posts: 22
|
 Posted: Mon Nov 22, 2004 1:49 pm Post subject: Disabling ps (command) |
 |
|
Does anyone happen to know how I can limit the output of ps command so, that users of my box could only see the processes they are running. By default, ps ax shows processes owned by other users as well, and I feel this violates the privacy of my users. In OpenNA Linux, this is the default behaviour, and I'm pretty sure this can be achieved in Gentoo by changing file permissions somewhere in /proc, but I haven't been able to locate such a file yet.
Another, somewhat related question as well... Is changing the file permissions of /proc/net/tcp and /proc/net/udp the proper way of limiting (in practice disable) netstat? Are there any drawbacks in this? For root everything works just fine, of course.
Regards,
Edaph |
|
| Back to top |
|
 |
tigrezno
Apprentice
Joined: 28 Jun 2002
Posts: 251
Location: Spain
|
| Posted: Mon Nov 22, 2004 2:03 pm Post subject: Re: Disabling ps (command) |
|
|
| Edaph wrote: | Does anyone happen to know how I can limit the output of ps command so, that users of my box could only see the processes they are running. By default, ps ax shows processes owned by other users as well, and I feel this violates the privacy of my users. In OpenNA Linux, this is the default behaviour, and I'm pretty sure this can be achieved in Gentoo by changing file permissions somewhere in /proc, but I haven't been able to locate such a file yet.
Another, somewhat related question as well... Is changing the file permissions of /proc/net/tcp and /proc/net/udp the proper way of limiting (in practice disable) netstat? Are there any drawbacks in this? For root everything works just fine, of course.
Regards,
Edaph |
You need to modify kernel proc code, because anyone can read the /proc directory by default. I know BSD don't allow you to see others processes. |
|
| Back to top |
|
|
ponch
n00b
Joined: 08 Jan 2004
Posts: 61
|
| Posted: Mon Nov 22, 2004 4:57 pm Post subject: Re: Disabling ps (command) |
|
|
| openwall or grsecurity kernel patches should do the trick. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
