lkml.org 
[lkml]   [2019]   [Dec]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Subject[PATCH v4 9/9] drivers/oprofile: open access for CAP_SYS_PERFMON privileged process
    From
    Date

    Open access to monitoring for CAP_SYS_PERFMON privileged processes.
    For backward compatibility reasons access to the monitoring remains open
    for CAP_SYS_ADMIN privileged processes but CAP_SYS_ADMIN usage for secure
    monitoring is discouraged with respect to CAP_SYS_PERFMON capability.

    Signed-off-by: Alexey Budankov <alexey.budankov@linux.intel.com>
    ---
    drivers/oprofile/event_buffer.c | 2 +-
    1 file changed, 1 insertion(+), 1 deletion(-)

    diff --git a/drivers/oprofile/event_buffer.c b/drivers/oprofile/event_buffer.c
    index 12ea4a4ad607..6c9edc8bbc95 100644
    --- a/drivers/oprofile/event_buffer.c
    +++ b/drivers/oprofile/event_buffer.c
    @@ -113,7 +113,7 @@ static int event_buffer_open(struct inode *inode, struct file *file)
    {
    int err = -EPERM;

    - if (!capable(CAP_SYS_ADMIN))
    + if (!perfmon_capable())
    return -EPERM;

    if (test_and_set_bit_lock(0, &buffer_opened))
    --
    2.20.1

    \
     
     \ /
      Last update: 2019-12-18 10:31    [W:4.418 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site