Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1443647

Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface

From Kees Cook <keescook@chromium.org>
Newsgroups linux.kernel
Subject Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface
Date 2016-07-14 20:00 +0200
Message-ID <rUT5w-4jD-11@gated-at.bofh.it> (permalink)
References (3 earlier) <rUFFf-43M-11@gated-at.bofh.it> <rUOfw-1kh-15@gated-at.bofh.it> <rURn4-3qz-11@gated-at.bofh.it> <rUSVP-4ga-3@gated-at.bofh.it> <rUSVQ-4ga-33@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Thu, Jul 14, 2016 at 10:49 AM, Serge E. Hallyn <serge@hallyn.com> wrote:
> Kees, you said adding a capability is hard - can you expound on that?

Best I can find at the moment was discussion around CAP_COMPROMISE_KERNEL:
http://thread.gmane.org/gmane.linux.kernel/1459165

Basically, adding a new capability for an interface can create
userspace compatibility problems (though perhaps in this case, it's a
new interface, so a new capability would be okay, but it's such a
narrow use-case and CAP_SYS_NICE fits fine).

-Kees

-- 
Kees Cook
Chrome OS & Brillo Security

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface John Stultz <john.stultz@linaro.org> - 2016-07-14 01:50 +0200
  Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Kees Cook <keescook@chromium.org> - 2016-07-14 05:40 +0200
    Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Arjan van de Ven <arjan@linux.intel.com> - 2016-07-14 07:30 +0200
    Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface "Serge E. Hallyn" <serge@hallyn.com> - 2016-07-14 14:50 +0200
      Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Arjan van de Ven <arjan@linux.intel.com> - 2016-07-14 15:50 +0200
        Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface John Stultz <john.stultz@linaro.org> - 2016-07-14 18:10 +0200
      Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface John Stultz <john.stultz@linaro.org> - 2016-07-14 18:10 +0200
        Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Kees Cook <keescook@chromium.org> - 2016-07-14 19:50 +0200
          Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Arjan van de Ven <arjan@linux.intel.com> - 2016-07-14 19:50 +0200
          Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface "Serge E. Hallyn" <serge@hallyn.com> - 2016-07-14 19:50 +0200
            Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface Kees Cook <keescook@chromium.org> - 2016-07-14 20:00 +0200
              Re: [PATCH 2/2] proc: Add /proc/<pid>/timerslack_ns interface "Serge E. Hallyn" <serge@hallyn.com> - 2016-07-14 22:30 +0200

csiph-web