Re: [PATCH v7 07/12] powerpc/perf: open access for CAP_PERFMON privileged process

[PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability · Alexey Budankov <hidden> · 2020-02-17
[PATCH v7 01/12] capabilities: introduce CAP_PERFMON to kernel and user space · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 01/12] capabilities: introduce CAP_PERFMON to kernel and user space · Stephen Smalley <hidden> · 2020-02-18
Re: [PATCH v7 01/12] capabilities: introduce CAP_PERFMON to kernel and user space · James Morris <jmorris@namei.org> · 2020-02-18
Re: [PATCH v7 01/12] capabilities: introduce CAP_PERFMON to kernel and user space · Alexey Budankov <hidden> · 2020-02-19
[PATCH v7 02/12] perf/core: open access to the core for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 02/12] perf/core: open access to the core for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 03/12] perf/core: open access to probes for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 03/12] perf/core: open access to probes for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 04/12] perf tool: extend Perf tool with CAP_PERFMON capability support · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 04/12] perf tool: extend Perf tool with CAP_PERFMON capability support · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 05/12] drm/i915/perf: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 05/12] drm/i915/perf: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 06/12] trace/bpf_trace: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 06/12] trace/bpf_trace: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 07/12] powerpc/perf: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 07/12] powerpc/perf: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 08/12] parisc/perf: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 08/12] parisc/perf: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 09/12] drivers/perf: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 09/12] drivers/perf: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 10/12] drivers/oprofile: open access for CAP_PERFMON privileged process · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 10/12] drivers/oprofile: open access for CAP_PERFMON privileged process · James Morris <jmorris@namei.org> · 2020-02-18
[PATCH v7 11/12] doc/admin-guide: update perf-security.rst with CAP_PERFMON information · Alexey Budankov <hidden> · 2020-02-17
[PATCH v7 12/12] doc/admin-guide: update kernel.rst with CAP_PERFMON information · Alexey Budankov <hidden> · 2020-02-17
Re: [PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability · Alexey Budankov <hidden> · 2020-02-25
Re: [Intel-gfx] [PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability · Serge Hallyn <serge@hallyn.com> · 2020-03-02
Re: [Intel-gfx] [PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability · James Morris <jmorris@namei.org> · 2020-03-02
Re: [Intel-gfx] [PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability · James Morris <jmorris@namei.org> · 2020-03-26

From: James Morris <jmorris@namei.org>
Date: 2020-02-18 19:30:30
Also in: intel-gfx, linux-doc, linux-man, linux-security-module, linuxppc-dev, lkml, selinux

On Mon, 17 Feb 2020, Alexey Budankov wrote:

For backward compatibility reasons access to the monitoring remains
open for CAP_SYS_ADMIN privileged processes but CAP_SYS_ADMIN usage
for secure monitoring is discouraged with respect to CAP_PERFMON
capability.

Signed-off-by: Alexey Budankov <redacted>


Reviewed-by: James Morris <redacted>


-- 
James Morris
[off-list ref]


_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help