Re: [PATCH V34 24/29] Lock down perf when in confidentiality mode

2019-06-22 Thread Kees Cook
On Fri, Jun 21, 2019 at 05:03:53PM -0700, Matthew Garrett wrote: > From: David Howells > > Disallow the use of certain perf facilities that might allow userspace to > access kernel data. > > Signed-off-by: David Howells > Signed-off-by: Matthew Garrett > Cc: Peter Zijlstra > Cc: Ingo Molnar

[PATCH V34 24/29] Lock down perf when in confidentiality mode

2019-06-21 Thread Matthew Garrett
From: David Howells Disallow the use of certain perf facilities that might allow userspace to access kernel data. Signed-off-by: David Howells Signed-off-by: Matthew Garrett Cc: Peter Zijlstra Cc: Ingo Molnar Cc: Arnaldo Carvalho de Melo --- include/linux/security.h | 1 + kernel/event