/openbmc/linux/net/smc/ |
H A D | smc_netlink.c | 39 /* can be retrieved by unprivileged users */ 44 /* can be retrieved by unprivileged users */ 49 /* can be retrieved by unprivileged users */ 54 /* can be retrieved by unprivileged users */ 59 /* can be retrieved by unprivileged users */ 64 /* can be retrieved by unprivileged users */ 69 /* can be retrieved by unprivileged users */ 74 /* can be retrieved by unprivileged users */ 79 /* can be retrieved by unprivileged users */ 101 /* can be retrieved by unprivileged users */ [all …]
|
/openbmc/linux/Documentation/devicetree/bindings/riscv/ |
H A D | extensions.yaml | 57 version of the unprivileged ISA specification. 72 version of the unprivileged ISA specification. 76 20191213 version of the unprivileged specification. 81 ratified in the 20191213 version of the unprivileged ISA 87 20191213 version of the unprivileged ISA specification. 92 ratified in the 20191213 version of the unprivileged ISA 98 ratified in the 20191213 version of the unprivileged ISA 104 ratified in the 20191213 version of the unprivileged ISA 110 the 20191213 version of the unprivileged ISA specification. 212 ratified in the 20191213 version of the unprivileged ISA [all …]
|
/openbmc/linux/tools/testing/selftests/bpf/progs/ |
H A D | bpf_misc.h | 9 * Programs could be loaded in privileged and unprivileged modes. 12 * unprivileged mode. 13 * If combination of privileged and unprivileged attributes is present 17 * that differ between privileged and unprivileged modes. 20 * unprivileged mode is derived from the usual program name by adding 25 * __msg_unpriv Same as __msg but for unprivileged mode. 28 * __success_unpriv Expect program load success in unprivileged mode. 31 * __failure_unpriv Expect program load failure in unprivileged mode. 40 * __retval_unpriv Same, but load program in unprivileged mode. 59 * __auxiliary_unpriv Same, but load program in unprivileged mode.
|
/openbmc/linux/include/linux/ |
H A D | fanotify.h | 32 * We do not allow unprivileged groups to request permission events. 33 * We do not allow unprivileged groups to get other process pid in events. 34 * We do not allow unprivileged groups to use unlimited resources. 45 * FAN_CLASS_NOTIF is the only class we allow for unprivileged group. 46 * We do not allow unprivileged groups to get file descriptors in events,
|
H A D | psi_types.h | 158 /* Trigger type - PSI_AVGS for unprivileged, PSI_POLL for RT */ 180 /* Unprivileged triggers against N*PSI_FREQ windows */
|
H A D | ipc_namespace.h | 97 * MIN_*: Lowest value an admin can set the maximum unprivileged limit to 98 * DFLT_*MAX: Default values for the maximum unprivileged limits
|
/openbmc/linux/Documentation/admin-guide/ |
H A D | perf-security.rst | 54 ID is 0, referred to as superuser or root), and b) unprivileged 60 Unprivileged processes are subject to a full security permission check 67 files of unprivileged users. 69 Unprivileged processes with enabled CAP_PERFMON capability are treated 87 Prior Linux v5.9 unprivileged processes using perf_events system call 90 So unprivileged processes provided with CAP_SYS_PTRACE capability are 96 Other capabilities being granted to unprivileged processes can 223 Unprivileged users 226 perf_events *scope* and *access* control for unprivileged processes 243 imposed but ignored for unprivileged processes with CAP_IPC_LOCK [all …]
|
/openbmc/linux/Documentation/userspace-api/ |
H A D | no_new_privs.rst | 15 - chroot is disallowed to unprivileged processes, since it would allow 49 Unprivileged users are therefore only allowed to install such filters 53 available to an unprivileged user. If everything running with a 60 available to unprivileged tasks if ``no_new_privs`` is set. In principle,
|
/openbmc/linux/tools/testing/selftests/x86/ |
H A D | iopl.c | 259 printf("[RUN]\tiopl(3) unprivileged but with IOPL==3\n"); in main() 261 printf("[FAIL]\tiopl(3) should work if iopl is already 3 even if unprivileged\n"); in main() 265 printf("[RUN]\tiopl(0) unprivileged\n"); in main() 267 printf("[FAIL]\tiopl(0) should work if iopl is already 3 even if unprivileged\n"); in main() 271 printf("[RUN]\tiopl(3) unprivileged\n"); in main() 273 printf("[FAIL]\tiopl(3) should fail if when unprivileged if iopl==0\n"); in main()
|
/openbmc/linux/kernel/bpf/ |
H A D | Kconfig | 73 bool "Disable unprivileged BPF by default" 77 Disables unprivileged BPF by default by setting the corresponding 83 Unprivileged BPF could be used to exploit certain potential
|
/openbmc/linux/tools/bpf/bpftool/Documentation/ |
H A D | bpftool-feature.rst | 26 | **bpftool** **feature probe** [*COMPONENT*] [**full**] [**unprivileged**] [**macros** [**prefix**… 58 When the **unprivileged** keyword is used, bpftool will dump 62 supported by the system. Unprivileged users MUST use the 63 **unprivileged** keyword: This is to avoid misdetection if
|
/openbmc/openbmc/poky/meta/recipes-core/glibc/glibc/ |
H A D | 0021-fix-create-thread-failed-in-unprivileged-process-BZ-.patch | 4 Subject: [PATCH] fix create thread failed in unprivileged process [BZ #28287] 7 applied, start a unprivileged container (docker run without --privileged), 15 was specified by an unprivileged process (process without CAP_SYS_ADMIN)
|
/openbmc/linux/Documentation/riscv/ |
H A D | uabi.rst | 10 chapter 27 of the unprivileged specification. 30 after standard unprivileged extensions. If multiple supervisor-level
|
/openbmc/linux/tools/bpf/bpftool/ |
H A D | feature.c | 207 printf("bpf() syscall for unprivileged users is enabled\n"); in probe_unprivileged_disabled() 269 printf("JIT compiler hardening is enabled for unprivileged users\n"); in probe_jit_harden() 322 printf("Unable to retrieve global memory limit for JIT compiler for unprivileged users\n"); in probe_jit_limit() 325 printf("Global memory limit for JIT compiler for unprivileged users is %ld bytes\n", res); in probe_jit_limit() 574 /* Probe may succeed even if program load fails, for unprivileged users in probe_prog_type() 641 * check required for unprivileged users in probe_map_type() 699 * unprivileged users check that we did not fail because of in probe_helper_for_progtype() 1110 p_err("missing %s, required for full feature probing; run as root or use 'unprivileged'", in handle_perms() 1113 …err("missing %s%s%s%s%s%s%s%srequired for full feature probing; run as root or use 'unprivileged'", in handle_perms() 1218 } else if (is_prefix(*argv, "unprivileged")) { in do_probe() [all …]
|
/openbmc/linux/net/devlink/ |
H A D | netlink.c | 360 /* can be retrieved by unprivileged users */ 366 /* can be retrieved by unprivileged users */ 372 /* can be retrieved by unprivileged users */ 390 /* can be retrieved by unprivileged users */ 410 /* can be retrieved by unprivileged users */
|
/openbmc/linux/Documentation/driver-api/early-userspace/ |
H A D | early_userspace_support.rst | 44 built by an unprivileged user. 65 Because device-special files cannot be created by a unprivileged user, 68 early userspace image can be built by an unprivileged user.
|
/openbmc/sdbusplus/tools/sdbusplus/ |
H A D | method.py | 81 "unprivileged": "vtable::common_::unprivileged",
|
/openbmc/linux/include/uapi/linux/ |
H A D | ublk_cmd.h | 153 * Unprivileged user can create /dev/ublkcN and /dev/ublkbN. 155 * /dev/ublk-control needs to be available for unprivileged user, and it 157 * unprivileged user. Except for the command of UBLK_CMD_ADD_DEV, all 168 * Then ublk server can be run as unprivileged user, and /dev/ublkbN can
|
/openbmc/linux/Documentation/block/ |
H A D | ublk.rst | 150 permission check, and this command is added for supporting unprivileged 161 unprivileged application needs to query devices the current user owns, 220 Unprivileged ublk device is supported by passing ``UBLK_F_UNPRIVILEGED_DEV``. 221 Once the flag is set, all control commands can be sent by unprivileged
|
/openbmc/linux/tools/testing/selftests/mount/ |
H A D | .gitignore | 2 unprivileged-remount-test
|
H A D | Makefile | 7 TEST_GEN_FILES := unprivileged-remount-test nosymfollow-test
|
H A D | run_unprivileged_remount.sh | 8 ./unprivileged-remount-test ;
|
/openbmc/sdbusplus/docs/yaml/ |
H A D | interface.md | 147 `unprivileged`and `no_reply`, which corresponds to `SD_BUS_VTABLE_DEPRECATED`, 159 - unprivileged 191 - `unprivileged` - SD_BUS_VTABLE_UNPRIVILEGED
|
/openbmc/openbmc/meta-security/lib/oeqa/runtime/cases/ |
H A D | smack.py | 139 '''Test if unprivileged process (without CAP_MAC_ADMIN privilege) 150 "Unprivileged process should not be able to change its label") 155 '''Test if unprivileged process cannot change file labels''' 165 "%d unprivileged %s -a %s %s 2>&1 " %(self.uid, chsmack, LABEL, filename) + 169 self.assertEqual( status, 0, "Unprivileged process changed label for %s" %filename)
|
/openbmc/linux/tools/testing/selftests/bpf/prog_tests/ |
H A D | unpriv_bpf_disabled.c | 71 /* Positive tests for unprivileged BPF disabled. Verify we can in test_unpriv_bpf_disabled_positive() 162 /* Negative tests for unprivileged BPF disabled. Verify we cannot in test_unpriv_bpf_disabled_negative() 262 /* ensure unprivileged bpf disabled is set */ in test_unpriv_bpf_disabled()
|