Thread (32 messages) flat view 32 messages, 5 authors, 2020-02-20

Re: [PATCH v5 07/10] powerpc/perf: open access for CAP_PERFMON privileged process

From: Anju T Sudhakar <hidden>
Date: 2020-01-22 11:02:48
Also in: intel-gfx, linux-arm-kernel, linux-perf-users, linux-security-module, lkml, selinux

On 1/20/20 5:00 PM, Alexey Budankov wrote:
Open access to monitoring for CAP_PERFMON privileged processes.
For backward compatibility reasons access to the monitoring remains
open for CAP_SYS_ADMIN privileged processes but CAP_SYS_ADMIN usage
for secure monitoring is discouraged with respect to CAP_PERFMON
capability. Providing the access under CAP_PERFMON capability singly,
without the rest of CAP_SYS_ADMIN credentials, excludes chances to
misuse the credentials and makes the operations more secure.

Signed-off-by: Alexey Budankov<redacted>
---
Acked-by: Anju T Sudhakar<redacted>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help