1
60%
master: 63%

Ran 18 Apr 2025 01:00AM UTC

Files 87

Run time 2s

Badge

Embed ▾

Committed 18 Apr 2025 12:54AM UTC coverage: 60.205% (-0.07%) from 60.276%

Job # 4812187568439296.1

Build Type

Pull #9749

CirrusCI

Committed by

SomberNight

Commit Message

add harden_memory_linux: harder for other processes to read our memory

This module tries to restrict the ability of other processes to access the memory of our process.
Traditionally, on Linux, one process can access the memory of another arbitrary process
if both are running as the same user (uid). (Root can ofc access the memory of ~any process)
Programs can opt-out from this by setting `prctl(PR_SET_DUMPABLE, 0);`

also see https://man.archlinux.org/man/PR_SET_DUMPABLE.2const.en

-----

Also, from https://unix.stackexchange.com/a/518452 :

In a terminal window:
```
% echo $$  # show our pid
6744
% read -sp 'secret password: '; echo
secret password:
%
```
Then in another terminal window:
```
% grep heap /proc/6744/maps
01bb7000-01c3e000 rw-p 00000000 00:00 0                                  [heap]
% dd if=/proc/6744/mem bs=1 skip=$((0x01bb7000)) count=$((0x01c3e000-0x01bb7000)) status=none |
    strings | less
...
% dd if=/proc/6744/mem bs=1 skip=$((0x01bb7000)) count=$((0x01c3e000-0x01bb7000)) status=none |
    strings | grep obiwan
obiwan_kenobi  # "secret password"
```

Pull Request Pull Request #9749: add harden_memory_linux: harder for other processes to read our memory

Run Details

21599 of 35876 relevant lines covered (60.2%)

0.6 hits per line

spesmilo / electrum / 4812187568439296 / 1
60%
master: 63%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 4812187568439296.1

spesmilo / electrum / 4812187568439296 / 1 60% master: 63%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 4812187568439296.1

spesmilo / electrum / 4812187568439296 / 1
60%
master: 63%

README BADGES
x