Messages in this thread | | | Date | Fri, 3 Oct 2014 23:12:04 +0200 | From | Peter Zijlstra <> | Subject | Re: [PATCH] x86,seccomp,prctl: Remove PR_TSC_SIGSEGV and seccomp TSC filtering |
| |
On Fri, Oct 03, 2014 at 02:04:53PM -0700, Andy Lutomirski wrote: > On Fri, Oct 3, 2014 at 2:02 PM, Peter Zijlstra <peterz@infradead.org> wrote:
> > Something like so.. slightly less ugly and possibly with more > > complicated conditions setting the cr4 if you want to fix tsc vs seccomp > > as well. > > This will crash anything that tries rdpmc in an allow-everything > seccomp sandbox. It's also not very compatible with my grand scheme > of allowing rdtsc to be turned off without breaking clock_gettime. :)
Well, we clear cap_user_rdpmc, so everybody who still tries it gets what he deserves, no problem there.
| |