Skip to content

md-cli v0.6.1 — argv-hardening (PR_SET_DUMPABLE)

Choose a tag to compare

View all tags
@bg002h bg002h released this 23 May 07:25
descriptor-mnemonic-md-cli-v0.6.1
ca4591b

SemVer-PATCH — process argv-hardening. md now calls prctl(PR_SET_DUMPABLE, 0) at the top of main() (Linux; no-op elsewhere), denying other-UID /proc/$PID/cmdline reads + core dumps. New process_hardening module + libc dep. Part of the m-format constellation argv-hardening rollout (mnemonic-toolkit v0.34.7 + ms-cli v0.4.1 + mk-cli v0.4.2).

Assets 2
Loading