| From | Andi Kleen <> | Subject | Re: [RFC PATCH tip 0/5] tracing filters with BPF | Date | Tue, 03 Dec 2013 16:01:59 -0800 |
| |
Alexei Starovoitov <ast@plumgrid.com> writes:
Can you do some performance comparison compared to e.g. ktap? How much faster is it?
While it sounds interesting, I would strongly advise to make this capability only available to root. Traditionally lots of complex byte code languages which were designed to be "safe" and verifiable weren't really. e.g. i managed to crash things with "safe" systemtap multiple times. And we all know what happened to Java.
So the likelyhood of this having some hole somewhere (either in the byte code or in some library function) is high.
-Andi
|