On Fri, 10 Nov 2017, David Howells wrote:

That would be fine by me.  I have a patch that locks down kprobes in this
series.  

Which AFAICS renders locking down ftrace as-is unnecessary ...

Steven says that ftrace might acquire the ability to dump registers in 
the future.

... and even if that happens, locking down only that particular feature of 
ftrace would be needed.

Thanks,

-- 
Jiri Kosina
SUSE Labs

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html