Messages in this thread | | | Date | Sat, 19 May 2012 00:33:03 +0200 | Subject | Re: [PATCH] Trace event for capable(). | From | richard -rw- weinberger <> |
| |
On Thu, May 17, 2012 at 9:50 PM, Auke Kok <auke-jan.h.kok@intel.com> wrote: > Add a simple trace event for capable(). > > There's been a lot of discussion around capable(), and there > are plenty of tools to help reduce capabilities' usage from > userspace. A major gap however is that it's almost impossible > to see or verify which bits are requested from either userspace > or in the kernel. > > This patch adds a minimal tracer that will print out which > CAPs are requested and whether the request was granted.
Can we please have support for user namespaces? At least idicate whether the current namespace is init_user_ns or not.
-- Thanks, //richard
| |