Re: [PATCH bpf-next] bpf, capabilities: introduce CAP_BPF
From: Alexei Starovoitov <hidden>
Date: 2019-08-29 17:19:29
Also in:
bpf, linux-api, linux-security-module
On Thu, Aug 29, 2019 at 09:34:34AM -0400, Steven Rostedt wrote:
As the above seems to favor the idea of CAP_TRACING allowing write access to tracefs, should we have a CAP_TRACING_RO for just read access and limited perf abilities?
read only vs writeable is an attribute of the file system. Bringing such things into caps seem wrong to me.