Re: [PATCH V33 29/30] tracefs: Restrict tracefs when the kernel is locked down

2019-06-26 Thread Matthew Garrett
On Wed, Jun 26, 2019 at 6:07 AM Steven Rostedt wrote: > > On Thu, 20 Jun 2019 18:19:40 -0700 > Matthew Garrett wrote: > > +static const struct file_operations tracefs_proxy_file_operations = { > > + .read = default_read_file, > > + .write =default_write_file, > > +

Re: [PATCH V33 29/30] tracefs: Restrict tracefs when the kernel is locked down

2019-06-26 Thread Steven Rostedt
On Thu, 20 Jun 2019 18:19:40 -0700 Matthew Garrett wrote: > Tracefs may release more information about the kernel than desirable, so > restrict it when the kernel is locked down in confidentiality mode by > preventing open(). > > Signed-off-by: Matthew Garrett > Cc: Steven Rostedt > --- >

[PATCH V33 29/30] tracefs: Restrict tracefs when the kernel is locked down

2019-06-20 Thread Matthew Garrett
Tracefs may release more information about the kernel than desirable, so restrict it when the kernel is locked down in confidentiality mode by preventing open(). Signed-off-by: Matthew Garrett Cc: Steven Rostedt --- fs/tracefs/inode.c | 41 +++-