kernel: make /proc/kallsyms mode 400 to reduce ease of attacking

[~andy/linux] / kernel / kallsyms.c

diff --git a/kernel/kallsyms.c b/kernel/kallsyms.c
index 6f6d091b57573bf37fc98fdcb2df91c08787543d..a8db2570f99a9cb094daa2e773fc74e6e23d25bb 100644 (file)
--- a/kernel/kallsyms.c
+++ b/kernel/kallsyms.c
@@ -546,7 +546,7 @@ static const struct file_operations kallsyms_operations = {
 
 static int __init kallsyms_init(void)
 {
-       proc_create("kallsyms", 0444, NULL, &kallsyms_operations);
+       proc_create("kallsyms", 0400, NULL, &kallsyms_operations);
        return 0;
 }
 device_initcall(kallsyms_init);