Mailing List Archive

conky and /proc/net restrictions
Hi!

Is it possible to work around /proc/net restrictions to let conky access
network traffic stats without running `sudo conky` or disabling
CONFIG_GRKERNSEC_PROC_USER? Maybe using `setfacl` or something like that
to mark /usr/bin/conky allowed to access /proc/net?

--
WBR, Alex.
Re: conky and /proc/net restrictions [ In reply to ]
On Sep 30, 2012 3:25 PM, "Alex Efros" <powerman@powerman.name> wrote:
> Is it possible to work around /proc/net restrictions to let conky access
> network traffic stats without running `sudo conky` or disabling
> CONFIG_GRKERNSEC_PROC_USER? Maybe using `setfacl` or something like that
> to mark /usr/bin/conky allowed to access /proc/net?

Iirc there is a kernel setting that defines which group (gid) is exempt
from this control. Perhaps you can use that and make the conky user part of
that group?

Wkr,
Sven Vermeulen