Alexey Budankov
eda72e1f64
BACKPORT: capabilities: Introduce CAP_PERFMON to kernel and user space ...
Introduce the CAP_PERFMON capability designed to secure system
performance monitoring and observability operations so that CAP_PERFMON
can assist CAP_SYS_ADMIN capability in its governing role for
performance monitoring and observability subsystems.
CAP_PERFMON hardens system security and integrity during performance
monitoring and observability operations by decreasing attack surface that
is available to a CAP_SYS_ADMIN privileged process [2]. Providing the access
to system performance monitoring and observability operations under CAP_PERFMON
capability singly, without the rest of CAP_SYS_ADMIN credentials, excludes
chances to misuse the credentials and makes the operation more secure.
Thus, CAP_PERFMON implements the principle of least privilege for
performance monitoring and observability operations (POSIX IEEE 1003.1e:
2.2.2.39 principle of least privilege: A security design principle that
states that a process or program be granted only those privileges
(e.g., capabilities) necessary to accomplish its legitimate function,
and only for the time that such privileges are actually required)
CAP_PERFMON meets the demand to secure system performance monitoring and
observability operations for adoption in security sensitive, restricted,
multiuser production environments (e.g. HPC clusters, cloud and virtual compute
environments), where root or CAP_SYS_ADMIN credentials are not available to
mass users of a system, and securely unblocks applicability and scalability
of system performance monitoring and observability operations beyond root
and CAP_SYS_ADMIN use cases.
CAP_PERFMON takes over CAP_SYS_ADMIN credentials related to system performance
monitoring and observability operations and balances amount of CAP_SYS_ADMIN
credentials following the recommendations in the capabilities man page [1]
for CAP_SYS_ADMIN: "Note: this capability is overloaded; see Notes to kernel
developers, below." For backward compatibility reasons access to system
performance monitoring and observability subsystems of the kernel remains
open for CAP_SYS_ADMIN privileged processes but CAP_SYS_ADMIN capability
usage for secure system performance monitoring and observability operations
is discouraged with respect to the designed CAP_PERFMON capability.
Although the software running under CAP_PERFMON can not ensure avoidance
of related hardware issues, the software can still mitigate these issues
following the official hardware issues mitigation procedure [2]. The bugs
in the software itself can be fixed following the standard kernel development
process [3] to maintain and harden security of system performance monitoring
and observability operations.
[1] http://man7.org/linux/man-pages/man7/capabilities.7.html
[2] https://www.kernel.org/doc/html/latest/process/embargoed-hardware-issues.html
[3] https://www.kernel.org/doc/html/latest/admin-guide/security-bugs.html
Change-Id: I7f21bf978186db284d87b61a91061fdd8385b292
Signed-off-by: Alexey Budankov <alexey.budankov@linux.intel.com>
Acked-by: James Morris <jamorris@linux.microsoft.com>
Acked-by: Serge E. Hallyn <serge@hallyn.com>
Acked-by: Song Liu <songliubraving@fb.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Tested-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Cc: Alexei Starovoitov <ast@kernel.org>
Cc: Andi Kleen <ak@linux.intel.com>
Cc: Igor Lubashev <ilubashe@akamai.com>
Cc: Jiri Olsa <jolsa@redhat.com>
Cc: Namhyung Kim <namhyung@kernel.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Stephane Eranian <eranian@google.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: intel-gfx@lists.freedesktop.org
Cc: linux-doc@vger.kernel.org
Cc: linux-man@vger.kernel.org
Cc: linux-security-module@vger.kernel.org
Cc: selinux@vger.kernel.org
Link: http://lore.kernel.org/lkml/5590d543-82c6-490a-6544-08e6a5517db0@linux.intel.com
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:59:27 +07:00
UPSTREAM: binder: add flag to clear buffer on txn complete
2022-11-30 02:27:36 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
install several missing uapi headers
2020-08-21 11:01:49 +02:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge "Merge android-4.9.227(892702560) into msm-4.9"
2020-07-08 02:20:36 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
NFC: Add snapshot of NQxxx NFC driver
2017-05-26 15:05:08 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: net:sched: add action inheritdsfield to skbedit
2026-05-15 17:57:02 +07:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: bpf: Emit audit messages upon successful prog load and unload
2026-05-15 17:59:18 +07:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
soc: qcom: bgdaemon: add uevent support for TWM BG
2020-03-16 20:57:55 -07:00
UPSTREAM: bpf: Add bpf_send_signal_thread() helper
2026-05-15 17:59:26 +07:00
UPSTREAM: bpf: add comments to BPF ld/ldx sizes
2026-05-15 17:56:05 +07:00
BACKPORT: bpf: correct broken uapi for BPF_PROG_TYPE_PERF_EVENT program type
2026-05-15 17:59:13 +07:00
UPSTREAM: net: add skeleton of bpfilter kernel module
2026-05-15 17:56:31 +07:00
BACKPORT: bpf: Introduce function-by-function verification
2026-05-15 17:59:26 +07:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
BACKPORT: capabilities: Introduce CAP_PERFMON to kernel and user space
2026-05-15 17:59:27 +07:00
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers
2019-08-06 18:29:38 +02:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
Merge android-4.9.219(6ee8be4) into msm-4.9
2020-04-28 15:06:13 +08:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
BACKPORT: sock: add MSG_ZEROCOPY
2026-05-15 17:55:01 +07:00
esoc: Add provision to handle shutdown request in userspace
2017-10-27 16:39:16 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
eventpoll.h: fix epoll event masks
2018-03-22 09:17:38 +01:00
UPSTREAM: audit: Record fanotify access control decisions
2026-05-15 17:59:18 +07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include: fib: Remove the deprecated UID fields
2017-09-06 15:09:16 -07:00
crypto: msm: Add QTI crypto drivers
2017-04-11 16:49:21 -07:00
Merge android-4.9.149 ( ed0b11d) into msm-4.9
2019-02-12 11:18:51 +08:00
Merge android-4.9.181 ( 6ccab84) into msm-4.9
2019-08-07 15:58:44 +08:00
input: misc: hbtp_input: support active blob flag
2018-02-28 14:42:44 -08:00
UPSTREAM: hw_breakpoint: Allow watchpoint of length 3,5,6 and 7
2017-03-13 15:31:05 -07:00
Merge android-4.9.160 ( fd5657a) into msm-4.9
2019-03-21 14:06:06 +08:00
BACKPORT: xdp: support simultaneous driver and hw XDP attachment
2026-05-15 17:57:52 +07:00
net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
2020-05-27 16:41:53 +02:00
UPSTREAM: xsk: Fix umem fill/completion queue mmap on 32-bit
2026-05-15 17:57:49 +07:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
Revert "ANDROID: ALSA: jack: Update supported jack switch types"
2026-01-06 16:27:45 +02:00
UPSTREAM: HID: sony: Report DS4 motion sensors through a separate device
2018-10-24 17:03:59 -07:00
netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
2018-01-10 19:42:37 -07:00
msm: ipa: add support for HW stats to QMI
2018-05-04 16:09:13 +05:30
BACKPORT: ipv6: implement dataplane support for rthdr type 4 (Segment Routing Header)
2026-05-15 17:54:16 +07:00
net: ipv6: RTF_PCPU should not be settable from userspace
2017-05-03 08:36:36 -07:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
UPSTREAM: kcov: support comparison operands collection
2017-12-18 15:21:35 -08:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
2020-06-20 10:24:14 +02:00
uapi: fix linux/if_pppol2tp.h userspace compilation errors
2020-06-03 08:16:33 +02:00
uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
2019-02-20 10:18:35 +01:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
BACKPORT: loop: Add LOOP_CONFIGURE ioctl
2020-08-11 09:26:34 +02:00
BACKPORT: bpf: BPF for lightweight tunnel infrastructure
2026-05-15 17:54:17 +07:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
msm: mhi_dev: Add cv2x HW channel support in MHI driver
2019-07-30 05:53:20 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
uapi: Add missing header file msm_dsps.h.
2017-03-23 13:52:08 -07:00
msm: ipa3: Send pipe info based on tethering protocol
2020-04-02 23:57:00 +05:30
msm: kgsl: Log context type in case of GPU faults
2018-10-15 16:06:11 +05:30
msm: mdss: Allow resource update during secure UI
2020-03-05 05:50:00 +05:30
msm: mdss: Add support to update backlight when display commit
2018-06-20 17:51:10 +05:30
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
UPSTREAM: net: add new control message for incoming HW-timestamped packets
2026-05-15 17:55:02 +07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
2019-07-21 09:06:04 +02:00
nl80211: add WPA3 definition for SAE authentication
2024-12-13 22:46:35 +01:00
drivers misc: add okl4-link-shbuf driver
2018-12-09 18:41:17 -08:00
BACKPORT: openvswitch: add erspan version I and II support
2026-05-15 17:56:40 +07:00
uapi: fix linux/packet_diag.h userspace compilation error
2017-03-22 12:43:34 +01:00
Merge remote-tracking branch 'common/android-4.9-q' into lineage-18.1-caf-sdm845
2021-12-27 02:07:39 +02:00
BACKPORT: perf, bpf: Introduce PERF_RECORD_BPF_EVENT
2026-05-15 17:58:54 +07:00
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
net_sched: Add flow control support to prio qdisc
2017-03-22 17:37:14 -06:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
Merge android-4.9.176 ( e0625b3) into msm-4.9
2019-06-13 14:31:04 +08:00
arm/arm64: KVM: Add PSCI_VERSION helper
2018-04-20 08:21:04 +02:00
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
qbt1000: Add support for fingerprint gestures
2018-02-14 20:40:01 +05:30
msm: crypto: Add support for map and unmap ioctls
2018-04-20 10:56:50 -07:00
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
power: qpnp-qg: Add support for PMI632 v2.0
2018-06-18 11:37:25 +05:30
power: qpnp-qg: Add support for voltage-only mode of QG
2019-01-17 17:27:28 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
ice: msm: Encrypt only userdata
2018-06-01 14:39:35 +05:30
random: ignore GRND_RANDOM in getentropy(2)
2022-06-25 11:45:02 +02:00
uapi: fix linux/rds.h userspace compilation errors
2017-11-21 09:23:28 +01:00
net: rmnet_data: Add support to configure custom device name
2017-03-22 12:26:21 -06:00
msm: ipa: Add support for per client lan statistics
2017-10-30 23:23:51 +05:30
UPSTREAM: net: ipv4: add new RTM_F_FIB_MATCH flag for use with RTM_GETROUTE
2026-05-15 17:54:44 +07:00
BACKPORT: clone: add CLONE_PIDFD
2019-09-03 13:44:48 -07:00
seccomp: Add filter flag to opt-out of SSB mitigation
2018-05-22 16:58:01 +02:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
UPSTREAM: ipv6: sr: remove cleanup flag and fix HMAC computation
2026-05-15 17:54:25 +07:00
UPSTREAM: ipv6: sr: add code base for control plane support of SR-IPv6
2026-05-15 17:54:16 +07:00
BACKPORT: ipv6: sr: add core files for SR HMAC support
2026-05-15 17:54:16 +07:00
UPSTREAM: ipv6: sr: add support for SRH encapsulation and injection with lwtunnels
2026-05-15 17:54:16 +07:00
serial: 8250: Define RX trigger levels for OxSemi 950 devices
2021-09-22 11:43:06 +02:00
uapi: Add UAPI headers for slatecom_interface driver
2021-09-09 15:16:49 +05:30
uapi: Add missing Secure System uapi header files for sdm845
2017-03-13 18:08:32 -07:00
BACKPORT: tcp: export packets delivery info
2026-05-15 17:58:43 +07:00
net: Add snapshot of sockev module
2017-03-29 16:54:34 -07:00
spcom: move SPCOM_MAX_CHANNELS define to uapi/linux/spcom.h
2017-08-13 08:35:44 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include/uapi/linux/swab: Fix potentially missing __always_inline
2023-01-07 12:07:28 +01:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
BACKPORT: delayacct: track delays from thrashing cache pages
2019-03-22 14:08:39 -07:00
BACKPORT: tcp: add dsack blocks received stats
2026-05-15 17:58:44 +07:00
BACKPORT: tee: add register user memory
2018-02-21 15:40:42 +00:00
Revert "rtc: alarm: Add power-on alarm feature"
2017-11-01 01:19:42 -07:00
tipc: Avoid copying bytes beyond the supplied data
2019-06-11 12:22:34 +02:00
UPSTREAM: tls: RX path for ktls
2026-05-15 17:58:23 +07:00
tty: actually undefine superseded ASYNC flags
2021-05-22 10:40:24 +02:00
msm: vidc: Add support for setting dynamic QP range
2019-05-19 14:09:11 +05:30
Merge remote-tracking branch 'common/android-4.9-q' into android13-4.9-sdm845
2022-11-09 19:25:28 +02:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
UPSTREAM: wireguard: global: fix spelling mistakes in comments
2021-03-23 02:09:21 +02:00
BACKPORT: xfrm: Add a new lookup key to match xfrm interfaces.
2018-10-26 21:39:51 -07:00
eda72e1f64