Messages in this thread Patch in this message | | | Subject | [PATCH 5/3] perf_counter: Require CAP_SYS_ADMIN for raw tracepoint data | From | Peter Zijlstra <> | Date | Mon, 10 Aug 2009 11:27:32 +0200 |
| |
Subject: perf_counter: Require CAP_SYS_ADMIN for raw tracepoint data From: Peter Zijlstra <a.p.zijlstra@chello.nl> Date: Mon Aug 10 11:20:12 CEST 2009
Raw tracepoint data is a severe data leak, restrict this to root only.
Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl> --- kernel/perf_counter.c | 8 ++++++++ 1 file changed, 8 insertions(+)
Index: linux-2.6/kernel/perf_counter.c =================================================================== --- linux-2.6.orig/kernel/perf_counter.c +++ linux-2.6/kernel/perf_counter.c @@ -3788,6 +3788,14 @@ static void tp_perf_counter_destroy(stru static const struct pmu *tp_perf_counter_init(struct perf_counter *counter) { + /* + * Raw tracepoint data is a severe data leak, only allow root to + * have these. + */ + if ((counter->attr.sample_type & PERF_SAMPLE_RAW) && + !capable(CAP_SYS_ADMIN)) + return ERR_PTR(-EPERM); + if (ftrace_profile_enable(counter->attr.config)) return NULL;
| |