tracing: Disable "other" permission bits in the tracefs files

Browse source

When building the files in the tracefs file system, do not by default set
any permissions for OTH (other). This will make it easier for admins who
want to define a group for accessing tracefs and not having to first
disable all the permission bits for "other" in the file system.

As tracing can leak sensitive information, it should never by default
allowing all users access. An admin can still set the permission bits for
others to have access, which may be useful for creating a honeypot and
seeing who takes advantage of it and roots the machine.

Link: https://lkml.kernel.org/r/20210818153038.864149276@goodmis.org

Signed-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>

...

This commit is contained in:

Steven Rostedt (VMware) 2021-08-18 11:24:51 -04:00

parent 49d67e4457

commit 21ccc9cd72

15 changed files with 103 additions and 96 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

23

kernel/trace/ftrace.c

View file

73

kernel/trace/trace.c

View file

3

kernel/trace/trace.h

View file

2

kernel/trace/trace_dynevent.c

View file

42

kernel/trace/trace_events.c

View file

4

kernel/trace/trace_events_synth.c

View file

2

kernel/trace/trace_functions_graph.c

View file

6

kernel/trace/trace_hwlat.c

View file

8

kernel/trace/trace_kprobe.c

View file

14

kernel/trace/trace_osnoise.c

View file

2

kernel/trace/trace_printk.c

View file

4

kernel/trace/trace_recursion_record.c

View file

6

kernel/trace/trace_stack.c

View file

6

kernel/trace/trace_stat.c

View file

4

kernel/trace/trace_uprobe.c

View file