|
The kernel syslog contains debugging information that is often useful during
exploitation of other vulnerabilities, such as kernel heap addresses. Rather
than futilely attempt to sanitize hundreds (or thousands) of printk statements
and simultaneously cripple useful debugging functionality, it is far simpler
to create an option that prevents unprivileged users from reading the syslog.
For more information please refer to: https://lwn.net/Articles/414813/
(cherry picked from commit 11d91322beffcb4c420dc5e086782b20732ac6fe)
|
