Re: [PATCH v3 0/3] admin-guide: extend perf-security with resource control, data categories and privileged users

2019-02-18 Thread Alexey Budankov
On 18.02.2019 2:14, Jonathan Corbet wrote: > On Mon, 11 Feb 2019 16:32:33 +0300 > Alexey Budankov wrote: > >> The patch set extends the first version of perf-security.rst documentation >> file [1], [2], [3] with the following topics: >> >> 1) perf_events

Re: [PATCH v2 1/4] perf-security: document perf_events/Perf resource control

2019-02-11 Thread Alexey Budankov
On 11.02.2019 17:15, Thomas Gleixner wrote: > On Mon, 11 Feb 2019, Alexey Budankov wrote: >> On 11.02.2019 1:34, Thomas Gleixner wrote: >>> On Thu, 7 Feb 2019, Alexey Budankov wrote: >>> >>> General note: Please stay in the 80 char limit for all of the

[PATCH v3 4/4] perf-security: wrap paragraphs on 72 columns

2019-02-11 Thread Alexey Budankov
Implemented formatting of paragraphs to be not wider than 72 columns. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 278 +++- 1 file changed, 149 insertions(+), 129 deletions(-) diff --git a/Documentation/admin-guide/perf-security.rst b

[PATCH v3 3/4] perf-security: elaborate on perf_events/Perf privileged users

2019-02-11 Thread Alexey Budankov
Elaborate on possible perf_event/Perf privileged users groups and document steps about creating such groups. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 43 + 1 file changed, 43 insertions(+) diff --git a/Documentation/admin-guide/perf

[PATCH v3 2/4] perf-security: document collected perf_events/Perf data categories

2019-02-11 Thread Alexey Budankov
Document and categorize system and performance data into groups that can be captured by perf_events/Perf and explicitly indicate the group that can contain process sensitive data. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 32 +++-- 1 file

[PATCH v3 1/4] perf-security: document perf_events/Perf resource control

2019-02-11 Thread Alexey Budankov
Extend perf-security.rst file with perf_events/Perf resource control section describing RLIMIT_NOFILE and perf_event_mlock_kb settings for performance monitoring user processes. Signed-off-by: Alexey Budankov --- Changes in v3: - added two more paragraphs on open fds and memory allocation

[PATCH v3 0/3] admin-guide: extend perf-security with resource control, data categories and privileged users

2019-02-11 Thread Alexey Budankov
; --- Alexey Budankov (4): perf-security: document perf_events/Perf resource control perf-security: document collected perf_events/Perf data categories perf-security: elaborate on perf_events/Perf privileged users perf-security: wrap paragraphs on 72 columns Documentation/admin-guide/perf

Re: [PATCH v2 1/4] perf-security: document perf_events/Perf resource control

2019-02-11 Thread Alexey Budankov
On 11.02.2019 1:34, Thomas Gleixner wrote: > On Thu, 7 Feb 2019, Alexey Budankov wrote: > > General note: Please stay in the 80 char limit for all of the text. Yes, sure. [PATCH v2 4/4] implements wrapping at 72 columns. > >> +The perf_events system call API [2]_ allocate

[PATCH v2 4/4] perf-security: wrap paragraphs on 72 columns

2019-02-07 Thread Alexey Budankov
Implemented formatting of paragraphs to be not wider than 72 columns. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 276 +++- 1 file changed, 148 insertions(+), 128 deletions(-) diff --git a/Documentation/admin-guide/perf-security.rst b

[PATCH v2 3/4] perf-security: elaborate on perf_events/Perf privileged users

2019-02-07 Thread Alexey Budankov
Elaborate on possible perf_event/Perf privileged users groups and document steps about creating such groups. Signed-off-by: Alexey Budankov --- Changes in v2: - applied comments on v1 --- Documentation/admin-guide/perf-security.rst | 43 + 1 file changed, 43 insertions

[PATCH v2 2/4] perf-security: document collected perf_events/Perf data categories

2019-02-07 Thread Alexey Budankov
Document and categorize system and performance data into groups that can be captured by perf_events/Perf and explicitly indicate the group that can contain process sensitive data. Signed-off-by: Alexey Budankov --- Changes in v2: - applied comments on v1 --- Documentation/admin-guide/perf

[PATCH v2 1/4] perf-security: document perf_events/Perf resource control

2019-02-07 Thread Alexey Budankov
Extend perf-security.rst file with perf_events/Perf resource control section describing RLIMIT_NOFILE and perf_event_mlock_kb settings for performance monitoring user processes. Signed-off-by: Alexey Budankov --- Changes in v2: - applied comments on v1 --- Documentation/admin-guide/perf

[PATCH v2 0/3] admin-guide: extend perf-security with resource control, data categories and privileged users

2019-02-07 Thread Alexey Budankov
; --- Alexey Budankov (4): perf-security: document perf_events/Perf resource control perf-security: document collected perf_events/Perf data categories perf-security: elaborate on perf_events/Perf privileged users perf-security: wrap paragraphs on 72 columns Documentation/admin-guide/perf

Re: [PATCH v1 3/3] perf-security: document perf_events/Perf resource control

2019-02-07 Thread Alexey Budankov
On 07.02.2019 3:01, Jonathan Corbet wrote: > On Fri, 1 Feb 2019 10:30:58 +0300 > Alexey Budankov wrote: > >> Elaborate on possible perf_event/Perf privileged users groups >> and document steps about creating such groups. >> >> Signed-off-by: Alexey Budanko

Re: [PATCH v1 1/3] perf-security: document perf_events/Perf resource control

2019-02-07 Thread Alexey Budankov
On 07.02.2019 2:58, Jonathan Corbet wrote: > On Fri, 1 Feb 2019 10:29:11 +0300 > Alexey Budankov wrote: > >> Extend perf-security.rst file with perf_events/Perf resource control >> section describing RLIMIT_NOFILE and perf_event_mlock_kb settings for >> performanc

[PATCH v1 2/3] perf-security: document collected perf_events/Perf data categories

2019-01-31 Thread Alexey Budankov
Document and categorize system and performance data into groups that can be captured by perf_events/Perf and explicitly indicate the group that can contain process sensitive data. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 32 +++-- 1 file

[PATCH v1 3/3] perf-security: document perf_events/Perf resource control

2019-01-31 Thread Alexey Budankov
Elaborate on possible perf_event/Perf privileged users groups and document steps about creating such groups. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 43 + 1 file changed, 43 insertions(+) diff --git a/Documentation/admin-guide/perf

[PATCH v1 1/3] perf-security: document perf_events/Perf resource control

2019-01-31 Thread Alexey Budankov
Extend perf-security.rst file with perf_events/Perf resource control section describing RLIMIT_NOFILE and perf_event_mlock_kb settings for performance monitoring user processes. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 36 + 1 file

[PATCH v1 0/3] admin-guide: extend perf-security with resource control, data categories and privileged users

2019-01-31 Thread Alexey Budankov
; --- Alexey Budankov (3): perf-security: document perf_events/Perf resource control perf-security: document collected perf_events/Perf data categories perf-security: document perf_events/Perf resource control Documentation/admin-guide/perf-security.rst | 111 +++- 1 file changed

Re: [PATCH v4 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-12-06 Thread Alexey Budankov
On 06.12.2018 4:10, Kees Cook wrote: > On Tue, Nov 27, 2018 at 12:15 AM Alexey Budankov > wrote: >> >> >> Implement initial version of perf-security.rst documentation file >> covering security concerns of perf_event_paranoid settings. >> >> Suggested-by:

Re: [PATCH v4 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-12-03 Thread Alexey Budankov
Hi Peter, On 27.11.2018 22:13, Alexey Budankov wrote: > On 27.11.2018 21:11, Jonathan Corbet wrote: >> On Tue, 27 Nov 2018 11:15:37 +0300 >> Alexey Budankov wrote: >> >>> +To perform security checks, the Linux implementation splits processes into >>> t

Re: [PATCH v4 2/2] Documentation/admin-guide: update admin-guide index.rst

2018-11-27 Thread Alexey Budankov
Hello Kees, On 27.11.2018 20:23, Kees Cook wrote: > On Tue, Nov 27, 2018 at 12:16 AM, Alexey Budankov > wrote: >> >> Extend index.rst index file at admin-guide root directory with >> the reference to perf-security.rst file being introduced. >> >

Re: [PATCH v4 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-27 Thread Alexey Budankov
On 27.11.2018 21:11, Jonathan Corbet wrote: > On Tue, 27 Nov 2018 11:15:37 +0300 > Alexey Budankov wrote: > >> +To perform security checks, the Linux implementation splits processes into >> two >> +categories [6]_ : a) privileged processes (whose effective user ID i

Re: [PATCH v1 2/2]: Documentation/admin-guide: introduce perf-security.rst file

2018-11-27 Thread Alexey Budankov
Hi, On 19.11.2018 13:33, Peter Zijlstra wrote: > On Mon, Nov 19, 2018 at 08:42:52AM +0300, Alexey Budankov wrote: >> >> Implement initial version of perf-security.rst documentation file >> initially covering security concerns related to PCL/Perf performance >&

[PATCH v4 2/2] Documentation/admin-guide: update admin-guide index.rst

2018-11-27 Thread Alexey Budankov
Extend index.rst index file at admin-guide root directory with the reference to perf-security.rst file being introduced. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/index.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/index.rst b

[PATCH v4 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-27 Thread Alexey Budankov
Implement initial version of perf-security.rst documentation file covering security concerns of perf_event_paranoid settings. Suggested-by: Thomas Gleixner Signed-off-by: Alexey Budankov --- Changes in v4: - added docs for perf_event related capabilities Changes in v3: - toning down of the

[PATCH v4 0/2] Documentation/admin-guide: introduce perf-security.rst file and extend perf_event_paranoid documentation

2018-11-27 Thread Alexey Budankov
) security related implications of monitoring by a specific perf_events PMU [2] --- Alexey Budankov (2): Documentation/admin-guide: introduce perf-security.rst file Documentation/admin-guide: update admin-guide index.rst Documentation/admin-guide/index.rst | 1 + Documentation/admin

Re: [PATCH v2 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-26 Thread Alexey Budankov
On 26.11.2018 23:28, Jonathan Corbet wrote: > On Mon, 26 Nov 2018 11:57:21 +0300 > Alexey Budankov wrote: > >>>> +For the purpose of performing security checks Linux implementation splits >>>> +processes into two categories [6]_ : a) privileged processes (whose

[PATCH v3 2/2] Documentation/admin-guide: update admin-guide index.rst

2018-11-26 Thread Alexey Budankov
Extend index.rst index file at admin-guide root directory with the reference to perf-security.rst file being introduced. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/index.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/index.rst b

[PATCH v3 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-26 Thread Alexey Budankov
Implement initial version of perf-security.rst documentation file covering security concerns of perf_event_paranoid settings. Suggested-by: Thomas Gleixner Signed-off-by: Alexey Budankov --- Changes in v3: - toning down of the markup for "scope, access and resource" - adding defini

Re: [PATCH v2 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-26 Thread Alexey Budankov
Hello Jon, On 25.11.2018 22:47, Jonathan Corbet wrote: > On Wed, 21 Nov 2018 12:14:14 +0300 > Alexey Budankov wrote: > >> +For the purpose of performing security checks Linux implementation splits >> +processes into two categories [6]_ : a) privileged processes (whose >

[PATCH v3 0/2] Documentation/admin-guide: introduce perf-security.rst file and extend perf_event_paranoid documentation

2018-11-26 Thread Alexey Budankov
) security related implications of monitoring by a specific perf_events PMU [2] --- Alexey Budankov (2): Documentation/admin-guide: introduce perf-security.rst file Documentation/admin-guide: update admin-guide index.rst Documentation/admin-guide/index.rst | 1 + Documentation/admin

[PATCH v2 2/2] Documentation/admin-guide: update admin-guide index.rst

2018-11-21 Thread Alexey Budankov
Extend index.rst index file at admin-guide root directory with the reference to perf-security.rst file being introduced. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/index.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/index.rst b

[PATCH v2 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-21 Thread Alexey Budankov
Implement initial version of perf-security.rst documentation file initially covering security concerns related to perf_events/Perf performance monitoring in multiuser environments. Suggested-by: Thomas Gleixner Signed-off-by: Alexey Budankov --- Changes in v2: - replaced PCL referencing by

[PATCH v2 0/2] Documentation/admin-guide: introduce perf-security.rst file and extend perf_event_paranoid documentation

2018-11-21 Thread Alexey Budankov
c) security related implications of monitoring by a specific perf_events PMU [2] --- Alexey Budankov (2): Documentation/admin-guide: introduce perf-security.rst file Documentation/admin-guide: update admin-guide index.rst Documentation/admin-guide/index.rst | 1 + Documentation/admin

[PATCH v2 2/2] Documentation/admin-guide: update admin-guide index.rst

2018-11-20 Thread Alexey Budankov
Extend index.rst index file at admin-guide root directory with the reference to perf-security.rst file being introduced. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/index.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/index.rst b

[PATCH v2 1/2] Documentation/admin-guide: introduce perf-security.rst file

2018-11-20 Thread Alexey Budankov
Implement initial version of perf-security.rst documentation file initially covering security concerns related to PE/Perf performance monitoring in multiuser environments. Suggested-by: Thomas Gleixner Signed-off-by: Alexey Budankov --- Changes in v2: - replaced old PCL referencing by PE

[PATCH v2 0/2]: Documentation/admin-guide: introduce perf-security.rst file and extend perf_event_paranoid documentation

2018-11-20 Thread Alexey Budankov
by a specific PE PMU [2] --- Alexey Budankov (2): Documentation/admin-guide: introduce perf-security.rst file Documentation/admin-guide: update admin-guide index.rst Documentation/admin-guide/index.rst | 1 + Documentation/admin-guide/perf-security.rst | 76 + 2

Re: [PATCH v1 2/2]: Documentation/admin-guide: introduce perf-security.rst file

2018-11-19 Thread Alexey Budankov
Hi, On 19.11.2018 13:49, Jordan Glover wrote: > On Monday, November 19, 2018 11:46 AM, Peter Zijlstra > wrote: > >> On Mon, Nov 19, 2018 at 10:35:59AM +, Jordan Glover wrote: >> >>> On Monday, November 19, 2018 6:42 AM, Alexey Budankov >>>

Re: [PATCH v1 1/2]: Documentation/admin-guide: update admin-guide index.rst

2018-11-19 Thread Alexey Budankov
Hello Greg, On 19.11.2018 13:03, Greg KH wrote: > On Mon, Nov 19, 2018 at 08:41:31AM +0300, Alexey Budankov wrote: >> >> Extend index.rst index file at admin-guide root directory with >> the reference to perf-security.rst file being introduced. >> >&g

Re: [PATCH v1 2/2]: Documentation/admin-guide: introduce perf-security.rst file

2018-11-19 Thread Alexey Budankov
Hi, On 19.11.2018 13:33, Peter Zijlstra wrote: > On Mon, Nov 19, 2018 at 08:42:52AM +0300, Alexey Budankov wrote: >> >> Implement initial version of perf-security.rst documentation file >> initially covering security concerns related to PCL/Perf performance >&

[PATCH v1 2/2]: Documentation/admin-guide: introduce perf-security.rst file

2018-11-18 Thread Alexey Budankov
Implement initial version of perf-security.rst documentation file initially covering security concerns related to PCL/Perf performance monitoring in multiuser environments. Suggested-by: Thomas Gleixner Signed-off-by: Alexey Budankov --- Documentation/admin-guide/perf-security.rst | 83

[PATCH v1 1/2]: Documentation/admin-guide: update admin-guide index.rst

2018-11-18 Thread Alexey Budankov
Extend index.rst index file at admin-guide root directory with the reference to perf-security.rst file being introduced. Signed-off-by: Alexey Budankov --- Documentation/admin-guide/index.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/index.rst b

[PATCH v1 0/2]: Documentation/admin-guide: introduce perf-security.rst file and extend perf_event_paranoid documentation

2018-11-18 Thread Alexey Budankov
[2] --- Alexey Budankov (2): Documentation/admin-guide: update admin-guide index.rst Documentation/admin-guide: introduce perf-security.rst file Documentation/admin-guide/index.rst | 1 + Documentation/admin-guide/perf-security.rst | 83 + 2