Messages in this thread | | | From | Alexander Shishkin <> | Subject | [PATCH 0/2] perf/x86/intel: Work around BTS leaking kernel addresses | Date | Thu, 27 Aug 2015 18:13:40 +0300 |
| |
Hi Peter,
Due to imprecise IP sampling, BTS may (and often does) leak kernel addresses when kernel tracing is not even enabled, which results in mostly syscall entry points and page_fault handler addresses being exposed. This might be a security concern for the address randomization, and it also makes life harder for gdb that makes use of bts samples.
This patchset works around the old (DS) driver and disables the new (intel_bts) for the unprivileged users on systems where perf paranoia level prohibits kernel tracing.
Not sure if these should be treated as bugfixes.
Alexander Shishkin (2): perf/x86/intel/ds: Work around BTS leaking kernel addresses perf/x86/intel/bts: Disallow use by unprivileged users on paranoid systems
arch/x86/kernel/cpu/perf_event_intel_bts.c | 10 ++++++++ arch/x86/kernel/cpu/perf_event_intel_ds.c | 40 +++++++++++++++++++++++++----- 2 files changed, 44 insertions(+), 6 deletions(-)
-- 2.5.0
| |