projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9d1f8be) | patch
lockdown: Lock down perf when in confidentiality mode
authorDavid Howells <dhowells@redhat.com>
Tue, 20 Aug 2019 00:18:00 +0000 (17:18 -0700)
committerJames Morris <jmorris@namei.org>
Tue, 20 Aug 2019 04:54:16 +0000 (21:54 -0700)
commitb0c8fdc7fdb77586c3d1937050925b960743306e
treebdd70cb78f6630c2e98a06aaae45600fcbb03f89tree | snapshot
parent9d1f8be5cf42b497a3bddf1d523f2bb142e9318ccommit | diff
lockdown: Lock down perf when in confidentiality mode

Disallow the use of certain perf facilities that might allow userspace to
access kernel data.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Matthew Garrett <mjg59@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Arnaldo Carvalho de Melo <acme@kernel.org>
Signed-off-by: James Morris <jmorris@namei.org>
include/linux/security.h diff | blob | history
kernel/events/core.c diff | blob | history
security/lockdown/lockdown.c diff | blob | history
Domain: System / Kernel;