Re: [PATCH bpf-next] bpf, capabilities: introduce CAP_BPF

On Thu, 29 Aug 2019 10:19:24 -0700
Alexei Starovoitov [off-list ref] wrote:

On Thu, Aug 29, 2019 at 09:34:34AM -0400, Steven Rostedt wrote:

quoted

As the above seems to favor the idea of CAP_TRACING allowing write
access to tracefs, should we have a CAP_TRACING_RO for just read access
and limited perf abilities?  

read only vs writeable is an attribute of the file system.
Bringing such things into caps seem wrong to me.

So using groups then? I'm fine with that.

-- Steve