lkml.org 
[lkml]   [2017]   [Oct]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
    Date
    Alexei Starovoitov <alexei.starovoitov@gmail.com> wrote:

    > If you want to lock down read access you'd need to disable
    > not only bpf, but all of kprobe and likey ftrace, since
    > untrusted root can infer kernel data by observing function
    > execution even if it cannot load modules and bpf progs.

    Okay.

    David

    \
     
     \ /
      Last update: 2017-10-23 16:52    [W:4.136 / U:0.256 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site